Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 03:40
Behavioral task
behavioral1
Sample
0d642178013dc22f6c341a187cdb03ea_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d642178013dc22f6c341a187cdb03ea_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
0d642178013dc22f6c341a187cdb03ea_JaffaCakes118.pdf
-
Size
38KB
-
MD5
0d642178013dc22f6c341a187cdb03ea
-
SHA1
4d3a12d0dfd52f8ba66a4522fa22804715d2819d
-
SHA256
9e151a4bd3355f29bca22f410bf08c768f2a3531193038eb9608e9223b6bb5e6
-
SHA512
cc8ca09157f176dea1616d7dbbedb9f5ec7c619c05c71c2854427551f6715ad05857c855a855bcfe07da242349aa1678a124ab5df4bcec3efc6805947544f1e1
-
SSDEEP
768:xtoTHBACDDVDh1l9EKUD3toTsktws6TNE5+XuMZmwgCLWar3u:v6AQ1l9EKUD3toAktkT1XFZmGWS3u
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2420 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2420 AcroRd32.exe 2420 AcroRd32.exe 2420 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d642178013dc22f6c341a187cdb03ea_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2420
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58cd5c05a936d33f4f4b6fa2afc4d4e2c
SHA1cb50408549b895a8a4021af072294d9b1d36b351
SHA2567e9821acf50228963740938fa259ab200287422e41519f952de58ca4a7a42ac2
SHA512746e972ddcdcfebd73cfe21f0ff0ea94a93218ce8f6a235fef7fa5ad5c7c78708922748fd64a686b10bd76a2c7c69635e6b546c35f1297e0eb487a273867efa4