Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/04/2024, 11:45
Behavioral task
behavioral1
Sample
032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf
-
Size
184KB
-
MD5
032d4ea58be13fe8584f8fec2ca7e246
-
SHA1
712a459730a13ec25b826333d349004b29e8a4a0
-
SHA256
fe6d637528dfd7a1decfe10446db2e2e930f228c3821e3940d59fa726fc46a07
-
SHA512
637493d0cda1ff47ceb865d34a75c712289d50a0f60d49b495a1700953a7714f741b561fbdf856c62afd8cf5db5cdfe7e996299ff8b51132f36592cbff3fd99b
-
SSDEEP
3072:O2irbxzGAFYDMxud7fKg3dXVmbOn5u86KjnnQGdptMo6eA9poGpGYSF:O2MKlWQ7Sg3d4bOBQGe8d
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\032d4ea58be13fe8584f8fec2ca7e246_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52fe0d76a4d3a2a4d838edc999d156374
SHA16ffc192b6a1eea09380888631777a8bb702c2a0a
SHA256213bc3ee05ba9116d984714a81b0d0ce6f61ebb757be2e9c19586c1159f593b8
SHA512a8bc5f9662b9fd031921c9454d31ccb375b2c619982a8b2b6695624a1d132a39e6d1d985134a51d0393be978f2595ab13b4fd916a011f7bed19a8e1730d159c2