Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 16:31
Behavioral task
behavioral1
Sample
059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf
-
Size
54KB
-
MD5
059c0735c4d9d667475595b2f277ba3d
-
SHA1
8bed5d853eddf67cdc67c6375cc6fafc721af3bb
-
SHA256
2800cee116f52fc08e521502dbc88b2c4857430efde118b910089d8962744de1
-
SHA512
62cdb95443d17fa754cdc97a8c8051e92d5cb4b93090752373e1d9d8a99f6e853a6ee9d0a07b6c1206d9ffef4d294a627ca83ae01b44f22a3b63154882c3bbeb
-
SSDEEP
1536:uXFZmGWSPQE/6iXsabG8d3aw9XkwWzoVPH6DZt:kysPx6iXfl903ziy3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2056 AcroRd32.exe 2056 AcroRd32.exe 2056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\059c0735c4d9d667475595b2f277ba3d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5022abc4331a6ab81b96fd124ad952a94
SHA153f9a2970d913d1e1054e4ef847b603c939ce8bd
SHA2564271022c216b9d00f0e94d584003c0dd7d9aa582e871f51db73488203cece13f
SHA512288b291b94e9c7897d8cb581bd991ca0098160de3928d2045c876840e934d1cbe046530fcb41b01a097956aa65d31dbd25c94b46b38180be9c137f9517631b89