Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 10:52
Behavioral task
behavioral1
Sample
413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf
-
Size
64KB
-
MD5
413a9c555b815c3e2eb6f1dec3c52146
-
SHA1
2c9715a11a6a56ae9f72cdeff91df378690a5ce5
-
SHA256
c99066bbb2d8a5a066c750edb2e3142096db2c67950cb940f1e3d17238cdb9c0
-
SHA512
049168c8b8de198d97e36dbb937162b5192f02b8fd0ebb7d3d2daa08dae3bcabe7e5a0be263f5ce77ed5d07f9ce60f5ceec6693a010bef16f8be462951e58c57
-
SSDEEP
1536:hGFciFVnN8dQFjabE5KB4zMQnGALlfhwUXw46:EFcehF2bcm44QnGAXwf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1524 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1524 AcroRd32.exe 1524 AcroRd32.exe 1524 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\413a9c555b815c3e2eb6f1dec3c52146_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ee193422568c21d2c59fa13c1a06ed36
SHA1ca5347201140316ba12e8fd60b638862abf058d4
SHA256494489dbe350a24da15d4ddc505f93728a00b84a581d21fed3484438ffa29d2f
SHA5120cc2c57278516b3034b698bfae88387439fbc030190620949652b8d4fa9c9f6c55f263887c43083cb028de3258ef0100896b2d143420b3e3740b5e5b50a6e61d