Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 06:06
Behavioral task
behavioral1
Sample
fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf
-
Size
42KB
-
MD5
fe9d0ac722d2094bd22606b5e9eb6621
-
SHA1
d3d3b9848d6830fe63ef6db1aa2e7ad12b9beed6
-
SHA256
9f0ccaedf539f2b44c400d26bfd0e93d2ffd7c2f51482b062dacc9b561c75bdc
-
SHA512
d68f42dd9defb0998987d164723d347b8259795c24b86f5d137297fb2d7236b0e2dc50d37172ef683131969aadb1b9ef106d19dfb2cf78e8da80814b09fbad32
-
SSDEEP
768:pM0Lk5Vjy7g9iMy6m9/5+pujVzZBsJg1om8h6WYP9plEH+k+:C0gRJw5AsDuuonh6xrk+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3040 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3040 AcroRd32.exe 3040 AcroRd32.exe 3040 AcroRd32.exe 3040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe9d0ac722d2094bd22606b5e9eb6621_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5951a4b70292782e0107ed142c9ad823c
SHA1f69492155a61b9bc6ba20d8748d759466f9ff0aa
SHA256d68c490a83132e10a9519665bbe92c7390fedc179c98c04441712918633f58a5
SHA5126c7f0f254052037576b803e922e5100847714f87cf6f03129ea7f916bbfbd73f6ad5a65feaeef9bc97d1b3ba69d7e46184a57445b2c78ec6380f8af3973d8e94