Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
14-05-2024 21:11
Behavioral task
behavioral1
Sample
43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf
-
Size
39KB
-
MD5
43174db3b1776f7b4bdb531d569d6996
-
SHA1
dd8228c03de158637cbca327d027b7c1ee2a80e7
-
SHA256
abfe5f2287673a5b173201e947c4fb8bdc9c81ceaa991ba823d39e6498a1c17a
-
SHA512
96b102554222f02eab41c011a3245066128a052cd7ee06f6fa577e15b0e1c7ebd2cba88fb7700d83c66f3a0857d41384d979fc7e6334deae38980b69c9389af6
-
SSDEEP
768:xgGzpDc1J+kR7ld0QN+EX1sctaT0TCIsloZ4UCnFVMfr8Tll:CGFY9P4kWGDQMfr8Tll
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1968 AcroRd32.exe 1968 AcroRd32.exe 1968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43174db3b1776f7b4bdb531d569d6996_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57058d3c15b4f83b7dfb27a490daef1d3
SHA173d2b49c307e87638d01021a6dacad2bbeeb5c69
SHA256aec325a12da2f6b9620596c2756956e4f694dc76e014607b4c4470abb3aad7ca
SHA51290247a3d5a004d215686d9c187acb386e5a3940e1574b5b4b98aa4f6e246c79c35ed86aa45b6cb27b68fc62aebe7f7de65dce80b2c2056ab3a0c825c109d5474