Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-04-2024 22:09
Behavioral task
behavioral1
Sample
03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf
-
Size
37KB
-
MD5
03bc87041391046d3ac60a48bd39da63
-
SHA1
b8d0c5082482537eba1dc5f9134ff30f5e51a130
-
SHA256
67ec4065d84ff93f140648a4e907392f0329887ef6bc3b28ae05919ddcc28804
-
SHA512
3c4a5f480b15a254c40d9a71aada5a04970f03045e90a99f355eef18c3efcfdead29910a7daeb133a8da06579272c2a4bbf2f894da799d82cf15059eaf39993b
-
SSDEEP
768:8XuMZmwgCLWarCJz1p9DNaZkWOupQE0fN5m+qVLMrZGLjdJcwiUp3Rk8dN:8XFZmGWSSz/lNanTQEAN5m+qVLMrctJb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03bc87041391046d3ac60a48bd39da63_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57b2f74ff06adc3c588749edc369b2d06
SHA1013a4fc0f32bab55869af0ebaa6350881c04bec2
SHA256e797ba411924135f082a11b204997e6827cfe4a8856a5fd3dd263938f6aaf192
SHA51233be444ae901c92490cf5479eedc215243693f6432adecd7694d4be9b405b93712b27a444426066de7327c5cc1cc0a35f7b04c2e7dbc6b5312ff7e33e9f24d85