Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 12:28
Behavioral task
behavioral1
Sample
ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf
-
Size
91KB
-
MD5
ff46a1f251e2bec1cb85675275d0f5f3
-
SHA1
76789799d8df3ade46ba12f18e283d6c8b4c8da1
-
SHA256
67a40887f2a502501dced68cf5602a5b2baa8a0cee977d5604aedf04801d6c47
-
SHA512
e21c3d7ba6dcd8c1ab28e86d31d9fb6a2d6d8e97cec117a14ddfb74da2a683c28ddf94f9e506ddf5ac0b9db8d1723709fd0fb1b56da1fc82fa7b87bc9116feb2
-
SSDEEP
1536:qwAg81548rQI5VrVX4uyOynWPNP9/V9LwcM6EWQIB7oo55sBH/WUpO7Diw:Nwa8D3r6uyRniNF/nvMoL5qHS7R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2300 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2300 AcroRd32.exe 2300 AcroRd32.exe 2300 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff46a1f251e2bec1cb85675275d0f5f3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2300
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b4358f333523e3c4fb41fc06c3ebfb36
SHA1a215b04304c25d551250425616a0c8315d69d91e
SHA2567aa3b09e955e93a532f6bb68783e5e53597442adc523f6b73a3ccb86a3974a71
SHA5121c2d1e012c7eb1931827200c75920cd111083914adae3732dc1ba9aa973cb2941378938e0ce53e4d35340229939777098a2860ecd5333bfb7bbdbfdc6889026d