Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-04-2024 22:08
Behavioral task
behavioral1
Sample
03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf
-
Size
38KB
-
MD5
03bbe33ee69c45493101c1ff3b32f502
-
SHA1
12a8da7d4030afac999fcca495e83a00b7f37460
-
SHA256
9863f298210b9b278e347c9b0e3a30e3300e0276daa65462d62b45274d754898
-
SHA512
4a537c9bae34d88e529b23300b683e1d7a01f271b69bbfbc79dd4a33325e2f13e750b214d44af148f38fda33b444393c698f32c953b179902cc699671c64e34a
-
SSDEEP
768:icf8EMWgVvAfC0dMaNCS+p9dSJiyZ141shw2N1CaVe/V9iy1LPLVQGZm1uRDQHav:icr2vUC0yG+p9Opy1shw2N1Cse/V9iyd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1664 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1664 AcroRd32.exe 1664 AcroRd32.exe 1664 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03bbe33ee69c45493101c1ff3b32f502_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1664
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57bb661536ac380d74ac73a44cd0b1e6a
SHA1c6f272bf4eb5338d75a986ad38d5bb2041e8774d
SHA256b4541a4d8dd34422dc64fed51709e70c6103f8025db0dcd10f32ba39ae407aa5
SHA51274ce5bcfce2b7bc3717abcf840f3b2e059c043e51378ab1600fbe6a23db4e5f16c0c439fedd051fed446d93efe572f1467ce191ac7e3f3163f54841c8bd2a943