Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 07:13
Behavioral task
behavioral1
Sample
1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf
-
Size
75KB
-
MD5
1fd8942ae0a2e7f87a9278d53a55f297
-
SHA1
64c32c5d24dd64c518d1c9dfabd9ccfa9afdc929
-
SHA256
0dfc74e263433324af3021f776afd191f84012bd91e751c8a1f974378f5247b6
-
SHA512
11b2d0679a5d15085f4fce0b2e33b79e54bf53bd15a3166a9d2fc999205a6ae4aff3f7af7196219149785a3c6e426f0520da14d9350cbf8775209123d3460b82
-
SSDEEP
1536:lN5vtWvXBnmH/eSVDz+1nTpgzVgxt2jLpw4kNyXDVMeSXFZmGWSxz:lN5FWPtY2KD61nht2j1w4kNyTVMeIysN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fd8942ae0a2e7f87a9278d53a55f297_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b28224a8291c2002544d64448127e04e
SHA16cfef063e26ddf595c138a12f904f0a034764d7c
SHA256b2f43f23050fa1bb03a5da2fdb6e93d9d51cde061f2b000f6b36444700424ba9
SHA5129b87649ac0fc9469797eb5f62ab58f6cd061dcc8c2efe8f7a31ee041b8be6b8e232c1eba06fbdd166458d3a6fbfc19c3143d14cd7dc1be9a4f2cea49229889df