Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
03/05/2024, 08:50
Behavioral task
behavioral1
Sample
101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf
-
Size
50KB
-
MD5
101ff3ae510358abdfd9096236e57398
-
SHA1
e4820c8469f18d30d9496a92b9fe5ef04c711f25
-
SHA256
eb8d08543e146bace0f210881427a5c60c1a64e71ddfbd09a13c8cc39da3abbb
-
SHA512
37150e8234d246a9011a66abc51a0a34971bb4d2ad4d7f8bcc42359063909ce01f8d046c8b5bcb23aa52c83e149a8cb0d2bddbe7f1c2f4d6ce304c0b8a41f2cc
-
SSDEEP
768:rgGzpDApNWxTrfV81t0ja5yVnoFRE3uGgQc+GPBzscQazAHlI3tOevdVWGTKF3mj:UGF0pCnoPEno+ZaElI3YeFD1jjTKNQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1972 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1972 AcroRd32.exe 1972 AcroRd32.exe 1972 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\101ff3ae510358abdfd9096236e57398_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5368c96b93e7ed7e2debfc73ef9a59d32
SHA112e2c89c6fb214dfad592f86c0257a12049bd4ac
SHA2561a1bdc3cce3f8ccc1833c8b362b250b368611acd7e1b3b1e8805f6f68881cadf
SHA512825d6c9602a5789c09ced96e3da8becef75a0d228df2ba0fd86ad8dc3c607867f73fddb6ae50361e94cccf9d6afa4db39d33794abf990ba1bb8e7700cc9cb2bf