Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/04/2024, 07:58
Behavioral task
behavioral1
Sample
072e29c2c3312c40a4a1372965046543_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
072e29c2c3312c40a4a1372965046543_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
072e29c2c3312c40a4a1372965046543_JaffaCakes118.pdf
-
Size
186KB
-
MD5
072e29c2c3312c40a4a1372965046543
-
SHA1
d77a999b699e6ca17107983e01641c24a11df640
-
SHA256
9a29cc9a7758f747a8c6a331aa22e980daf445d75bc2aea525dd01c56ec12902
-
SHA512
655e12a9281f59cad15c16711eb0f700a07ad1f17b21cef1fcb67883cd7389e7c04448d7e782e34692f2b7a56edcb9933186d2dfd02fcd5795cd568d1c5adab7
-
SSDEEP
3072:x2irbxzGAFYDMxud7fKg3dXVmbOn5uC6KjnyCkpyycu/C7xopzmSTtSC:x2MKlWQ7Sg3d4bO/RkpaICgdR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2864 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2864 AcroRd32.exe 2864 AcroRd32.exe 2864 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\072e29c2c3312c40a4a1372965046543_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2864
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b681ed66b9423c076c735f85a6919b88
SHA1ddd7f68b90fee40a9af9fff2614aa299c61d6fe6
SHA2561242ff0313df3fc5c12ba53e6d78c094faf5211e331e2b4646610785aafe0c36
SHA512089a3e0faa807f3af2e1bcf476ca8eb08f13d249f6d5b590609d20d59d239cf70de0db3a4690f20538dc51a436210b988376bb2ed4a664c6d212d75ebeb05405