Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 19:41
Behavioral task
behavioral1
Sample
4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf
-
Size
36KB
-
MD5
4cbe48887d2dfbd0c1f9f5447a7e4139
-
SHA1
33748a5c8058b08a286361394f15a3e1d5b58427
-
SHA256
94d0ded9076995dd15898d9eb4a24a984bae6a5dd269c3bca0d51c8ba44602d4
-
SHA512
4b45ae403da42ed45472882d74bcbac688ca68e64de03b06c14be9b4dd357ff09658c742895204a0bdb83725d5b0f937bd2cf16c42131c864953c379fe177b22
-
SSDEEP
768:DXuMZmwgCLWargE5HpxoeEjkTklIVBeGrw8EsZ39LOqajQ1/+vv4UR59pJC2:DXFZmGWSJjoeEjkTklIVQGrw8Es3VaEo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cbe48887d2dfbd0c1f9f5447a7e4139_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50dcae7463e623f33a58192788c698b07
SHA11546ba3e7f60ece149e8c2df6f14d1266d512b99
SHA256ddf140bfb92feab4bfed16ede2a6d88f49f63b3a4c18197a00087dc645db4bb8
SHA512b3c0704a72f829da2022d21b5b5f6cf02537a707ae3d5aaf5603eed5e939e1a6e5716f07b8f636bd9508fa07087c5a90009ea5cfc96696f12fa5d44b79f25193