Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28-04-2024 03:29
Behavioral task
behavioral1
Sample
0446b8eb0027ed96982c50316170f186_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0446b8eb0027ed96982c50316170f186_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
0446b8eb0027ed96982c50316170f186_JaffaCakes118.pdf
-
Size
59KB
-
MD5
0446b8eb0027ed96982c50316170f186
-
SHA1
201666a6da4b34c37c1b44f8fccb9cc68d97ad38
-
SHA256
304b53d794271511f8f824113ef06e90bb9fc2c3bb50ed5ce7e7b66ebe5ec6fa
-
SHA512
419c7ab1f676de4e789603614709f16752c2cb7f961514bb3986f7ec4e91c1e4b7ee151fb273bdf8d2b6dcd0c18857e2362e72de3a199a43e0b8d9475179a2b3
-
SSDEEP
1536:UGFgtGYrGNwFr4UZHOCOGH1pzyT6kcDy5Tt:hFgk7mr5OCOYByWkIyv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3068 AcroRd32.exe 3068 AcroRd32.exe 3068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0446b8eb0027ed96982c50316170f186_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD535c61ca8c72bf26e8c19857db6edb223
SHA118fb17ce2859a143e70d882fd7b8955df345b49b
SHA25637318adf577464770c58898836b6cb300a33a6e1a8e580861c0a37f15de0d04d
SHA512ba267296a7106c038f0cd664d00803467ef9e3911dd50a06f727707e36bea6802d48bb0b31e716b3816f74486fc5e2793710adf1d4abc6ea23736d5bb7cedfd1