Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 17:01
Behavioral task
behavioral1
Sample
ffc0adaecace7f2254ff3bc0e2105308_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffc0adaecace7f2254ff3bc0e2105308_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffc0adaecace7f2254ff3bc0e2105308_JaffaCakes118.pdf
-
Size
175KB
-
MD5
ffc0adaecace7f2254ff3bc0e2105308
-
SHA1
03b97e6eb90ba97ce0785be19a901e4343d2c746
-
SHA256
c33d5c1cbd1ab3b9118d7d62e876574f3892a3798b3e0f510d1368e43f78fcce
-
SHA512
86eb74d9804afb45422952c0cefa8caf040533cd49e141e07119556e61ac685f8874eb59bf328581821d284e2d24614d03cd4291097c47209a78745693851564
-
SSDEEP
3072:vSHx5Myrc9BXjC2db30ZyghLBXbZMy2hMZXJdtQOVUpdnWh2dbyRb2QR:arMOiBzHx30ZygBXlMxzYsdWhtR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2340 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2340 AcroRd32.exe 2340 AcroRd32.exe 2340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc0adaecace7f2254ff3bc0e2105308_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59c4d68424a9d43eba7e77218b713273b
SHA15cbe3542b438fea95c0a737b5eca574c99ef97b9
SHA2569d568548123ae06014eb31398a1e04cc4c155a17d813248fb1488d15220648b3
SHA5125220d1ee4f6e165570d13c01446b18f06da78fd3376510d68315de79e5b3ae6450cc3e7df3ee73b483641daae4bca6f47e50926b18946325a2f0d6f93ffbcf61