Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 09:40
Behavioral task
behavioral1
Sample
0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf
-
Size
29KB
-
MD5
0987dae5da9719c401b026cfc3cbb455
-
SHA1
435e0ca87335e354a34c4d794b891b47e1eda313
-
SHA256
bd5290cb091e66e2a170b455c19a7e666484f04a21b510d5ea19741c7c4b4d66
-
SHA512
82bd976aa0e0cb1fe590f14c812621e49348144b881dac07c88a018f4790ebcca749f44dd808b702ed9749de6785a92da270b0f829a99e1108ca7ab4ceee5afe
-
SSDEEP
384:M0P/QON8MUG6Qgw0JZCTzz02YFnarXWl0FYJYxMVKr2oR1IyR9g8vTUeKqJ7sjZO:tPXuMZmwgCLWarqQYgu05R29U7mHJIrd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 856 AcroRd32.exe 856 AcroRd32.exe 856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0987dae5da9719c401b026cfc3cbb455_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD534988ed7b91f4b3c6f470c583f6ff933
SHA1c1766239a3e3229700f40ac82cc0848c8881664e
SHA25600bb41e07fa95a43e6492c12cc746a55f26cbb5dfff5222c2e69e7941a8e8acf
SHA5127d9bb5932ec81635642bf242972233e87bf1888ded80c4c23a131beb950c6808408b872fc0581e48b0a21327d87673790b0a207cfc44066bad8c1ba53bd93767