Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 14:04
Behavioral task
behavioral1
Sample
ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf
-
Size
93KB
-
MD5
ff71d26fb9066e86a795c0f97f7f4a60
-
SHA1
26163ab2d49ef04a65f9fd9a0a70a94796b9f003
-
SHA256
9c30a6a93c21b3bdd1249a77c4d8690af1fc64af1e0be91e5f04d44f71687cda
-
SHA512
613f07778a9bf8edeba784098bdce078b764ef43752bdb2b12406d13e2cf4294f87be2afecb80f61df9f91397b3bd2e06f5054fce6e14aa9d293eb2d5fa63fef
-
SSDEEP
1536:kbUUMbL8lM5YI76hueAxWCkV985yFyZk5pnG6vLYZowA0yuLUWgfM+asCCWUpO7o:cUUM8K57WkeAxOuyFZpSTA0LeasC97YZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff71d26fb9066e86a795c0f97f7f4a60_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51e809834923d50f10317aadbe490e61c
SHA1f1a0385da427c1a51d1234af0a1031968443b907
SHA25627351ed057882c0b2796b9ff591cd5fdcebb432dd529377eeb28bcfe057c004e
SHA51201983fe7d7bb4fbba8593cb4679ef2eb8cd0e5acb7b54abc8690da7df5ca97bb037b7921f31c95da02b6c90b8a229c1f6fe38925aa0f68d443d1ebac5f5188f4