Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 05:06
Behavioral task
behavioral1
Sample
09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf
-
Size
35KB
-
MD5
09168fe56f1643aa3687096c77967bc5
-
SHA1
cccafbdc158d79142e4c01ef6a8fcee2e267b6e6
-
SHA256
649dd8796186f5b9b2707603d8ae6939552e1d4f648c9772340f7b5b09135c81
-
SHA512
1bef4d6ed5ae18dd1697dac85c1e1dbfa781599184eb605fb0cca0bae912cbeadbe8d40db6bc4876c798ef4b1daf09f893b11534e36409800354d7fbc8376ae6
-
SSDEEP
768:OIjZlleqB9vvPmOzeIhE2N1iaVVVDic1VQPxfViEGAmJuGDQceE5NXuMZmwgCLWD:ddzPTzhE2N1isVVDic1VQPxfViEGAmJ8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2072 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2072 AcroRd32.exe 2072 AcroRd32.exe 2072 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09168fe56f1643aa3687096c77967bc5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2072
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ecbc95f2d29aa39f17b5f3d8c26e83f7
SHA1807201a1caa369cfbf27d512d6b3dd45910ebd97
SHA256a49eab1e153c820277e3ca92359b01283a6360fdef4f3405af7851c485e596b2
SHA512de9a29378f4ffbeb9209b6fd4a13fa27ff499c7add2ae150cd89e6eeabb1dad13b983ee66ba07787528ce95795acc4286fc26c4b2697d74c8726980957d4f37d