Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 05:57
Behavioral task
behavioral1
Sample
1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf
-
Size
58KB
-
MD5
1fa97b3fb3849532cdec8518da03bda5
-
SHA1
381b6c5875fd279acf39d2e793bb3f36f53d0dc0
-
SHA256
aefecf03e197d1feecff2e11f75385e8272fdd18ec2b10e47fe662ba27bb15fb
-
SHA512
850c9fac7009d3ddcdf6ab439ea4303f01d30c849782080dc9ac55a3469447adca855b8807e9453c00d748847655606069032325feca22d6068d0268d742814a
-
SSDEEP
1536:hJGzPXR3YYwe8YT8g97onImXagmDNGYK0Nboejdlyar:fIh3Y68YT8gMpXagmhGYBhoeBlD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fa97b3fb3849532cdec8518da03bda5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f4b436ed98772f4291c94c6e79722fd1
SHA133ef4019e73ed8a2683bbdefb34934a9cd7cef8f
SHA25604d8a77b2442a814cafb21a93f5d7573b99f5406a4196744b6168a0f95eb3342
SHA512af60c794cb377fe27ca4c21322fdd3cd30ac0d8ad77ab7eb686f4057ce9489cb6559e821feb1cca3762cd7f75c366681138d8471572dba91304032416163c7b8