Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13-05-2024 20:59
Behavioral task
behavioral1
Sample
3c8c8e133ebac43b1618b77af142d5e6_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c8c8e133ebac43b1618b77af142d5e6_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
3c8c8e133ebac43b1618b77af142d5e6_JaffaCakes118.pdf
-
Size
15KB
-
MD5
3c8c8e133ebac43b1618b77af142d5e6
-
SHA1
7becd73d751cbd021c270f8dcf9b26ad292e242d
-
SHA256
945a33931b091b5ca8864f7630fa88834129e0fdddea58411dabe1585e6c20ce
-
SHA512
b8d825427637da9803230aabb90b48df11e0c1ed5f8dc0c474629fb2ff335239e29f124bfef72863ff76dbee45240684c5170ecb65035ebcb11839beb1a0d827
-
SSDEEP
384:tx8tOFQe8kYgjR0PfAZgqu8h13HegItQlohMQIi/+m:YtOBJR0PoCquqXdIt1MK2m
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1972 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1972 AcroRd32.exe 1972 AcroRd32.exe 1972 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c8c8e133ebac43b1618b77af142d5e6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57e41ae5da761ad14a4ef12058bf1e2b2
SHA10c84682fc0cb9e67e4da7bae9d0a3b555c880781
SHA256c811d8226ac835d359ddb2e892e402c1d50406a8134608f5248716b59670b93a
SHA5126491cb2aadecb1f12d7b62672d9174fda6856324eb6a33bcf7d7c4a8f26dd5edfca8907e4e4961a90381103dd96a32b2f7cbae239c9980a863357b91d85a72e8