Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 20:18
Behavioral task
behavioral1
Sample
14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf
-
Size
40KB
-
MD5
14523ff79427a05c5e171d510cd2f117
-
SHA1
c772c1c228af23b4729aa5703852f15339d9266f
-
SHA256
571c176c1538995288c8ce3ef8d31613de38916de27a71abf749cea122e72580
-
SHA512
a8d17960a1b41e8373e537f7dbcfab7f23684e249c4b3081c804d82c456a9c01ac1978991317a3ad33c8a8e46ba14d02952aaa9367449d0a0a6e001c37cb16f8
-
SSDEEP
768:FgGzpD2AwmS3orZvMVJKTVxSu5jcCQ42KzS31ff+hg4AXXqsWTOx8KM:WGFi8pz7C1eAXGTOxrM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2992 AcroRd32.exe 2992 AcroRd32.exe 2992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14523ff79427a05c5e171d510cd2f117_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52743ebc9810a6040e88e7456d5664728
SHA17614bfde52934ff79d121e47f9c0ff5b10abe32e
SHA2564e941d20522cab74b1f2bec6b70edd47912c0ce7f933c864bce0d0764c17c9a7
SHA512d0978d1f5459e6520b65f2d2bd2626dbb0809d02b26e21cf74dcdc71dd328e8ccc61e463d6dddee71cc2b5330043f5db32c60e5e419852d30fbc991ace059a31