Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/04/2024, 08:17
Behavioral task
behavioral1
Sample
07369cf73cad81b61b3c90dfcd1a8005_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
07369cf73cad81b61b3c90dfcd1a8005_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
07369cf73cad81b61b3c90dfcd1a8005_JaffaCakes118.pdf
-
Size
62KB
-
MD5
07369cf73cad81b61b3c90dfcd1a8005
-
SHA1
50450a9912717cc46d09d79b0c340aedfe3aef4e
-
SHA256
43c8872ece1a92b79186c32916a40313714ea5abe77d82776590715186749adb
-
SHA512
07e43211919f06566fd9854779dbc23358e3fbdfe932e1625d4d24688c70bd6d0a6bf0ec950a0c5ce5bcec66f622ccdefade376b2ab6e9dfec294291bb34af38
-
SSDEEP
1536:gGF2pETEyEdqc0yXc1qUP1VfZlMHWyywt0XjzM:tF2pzyG0D1qUdRvMXO0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07369cf73cad81b61b3c90dfcd1a8005_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56730a821207760f8da098f699dfab2ee
SHA1207f8badff871bd557213bdf446f62a47df3a2e7
SHA256ee560d2b9ad0dce8875db5be58943c9179b4bcb2f0f4a21acc3b07d6311b0dc4
SHA51232977ba58647b99a584fcf08934a387b929e099a4d584ea50ea09d0831a57a7e8472dc18e4414233154c0386f2ed77dc597bfd7820d325d156e6690c68783ae4