Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 03:25
Behavioral task
behavioral1
Sample
fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf
-
Size
35KB
-
MD5
fe50df11c89de7261e3af34728e49c89
-
SHA1
c8b5c7e7069decd4fb89d8eca40c615167e744c3
-
SHA256
b63535e0c2b58ef2ba9b68852873fc63cb561af7cc24c39d7ca3d4309c92aed4
-
SHA512
f0a8cf31513df7d9305977c81dbc932065448c443a5a2161fb48185243175c33d5a5d7e2d11d8ddda25c5ec332513b3eaa51fbcd1f949c04da1b33b5c6230bea
-
SSDEEP
768:xVxOfHE1T8ZqJGyVjKNPmo/7ZyvWjJux5rbT4FnhgRvQiX:kiTURkHYJyNnqhgRIiX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe50df11c89de7261e3af34728e49c89_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57e47cc387fa2c32c172c0337732d4ccd
SHA1ca58e7d4a0fcfe0ccd83764b697ddbf8390466bd
SHA256d46a8dba86839d7c6bf0ac69e6ce01e80460c19a09d3e0c26b70fb261d8cf4fb
SHA51279d316fdfea51baada3ea1cde3b49ae698067740ff1c580483e1211b09052909ad013ff5439ee411cdf259b344a6b11fe683d9da53813b9f6b5cc07fe8431ee6