Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 02:38
Behavioral task
behavioral1
Sample
fe3d1165cc18cc7d86d05c07af3f0022_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe3d1165cc18cc7d86d05c07af3f0022_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fe3d1165cc18cc7d86d05c07af3f0022_JaffaCakes118.pdf
-
Size
7KB
-
MD5
fe3d1165cc18cc7d86d05c07af3f0022
-
SHA1
8a8f702040425193c0d581e976905057650116cf
-
SHA256
08a62fd8090699582c486e476f945b932abecdae2af9f66add383141b7f5cf73
-
SHA512
df0d90e9a13bedb599381a239332f4cfc2c71e831ee52deec3fda378db5073bd0aa40827df12c961162fbd008b36e4e7099986324902c2bd7062fa494bc66c5a
-
SSDEEP
192:0QN2/D0lHt/AhkLAwiEKNkqulp18mygyo22l8ctVK3i:ub0RZLHijYdybpcVKy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1716 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1716 AcroRd32.exe 1716 AcroRd32.exe 1716 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe3d1165cc18cc7d86d05c07af3f0022_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1716
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57bd7f337ef652ae4a029934a9cd5b25d
SHA154bdb23042b5b295cb5ea6bcc8680412f42e8a20
SHA256ffe6928bda6595560fbdbeeae2d2c395334a9fd0522f368345a21884f5009896
SHA512ee51e6152e3680ea4eda90fcacd95127514b189e915034694363874a19b4f3c8bb7c35a6a6d6947df2bef946535201c334b1d441eda470946c6434ba4269b797