Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 04:48
Behavioral task
behavioral1
Sample
fe77e22a09f144f8e1ab752ff4788aea_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe77e22a09f144f8e1ab752ff4788aea_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fe77e22a09f144f8e1ab752ff4788aea_JaffaCakes118.pdf
-
Size
36KB
-
MD5
fe77e22a09f144f8e1ab752ff4788aea
-
SHA1
70dc43a487c64df4581bdd82d32b3d46390b78ca
-
SHA256
f543c08de1d5ff9b5be9bb6787cd11b541b785fc4d02bac11d61e86a1b9c1c37
-
SHA512
4882482caab3d4049efd93ffff78f831bdcf1335c0480cfb01711d21ad01b80f87d03f5370a73c356499f4f7e5094c437530acd65b928bae90745ee3efa26824
-
SSDEEP
768:JLYZuDHSZ5dBRnj12HyoJww0iIqwuCkr7pbGNHqvpxB:h1DHI12HyNwumr7UqxxB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe77e22a09f144f8e1ab752ff4788aea_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD519527f3818531175dcd47536783f8133
SHA1d2b129659b9c7038e73a182f6a2b445dc569a0da
SHA2563c0d5b876c0d380ed862f2820806213372b416398797a43a31ec80f317d9fb90
SHA5128f019b0f65ccfdb721af8185bd283ca773e0873c64e337bec7da790fb31a2ce6e6b4fe56cea9789ffd37aac75564510ed98f1a49c1814e1caca115d77eae4c09