Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 15:45
Behavioral task
behavioral1
Sample
503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf
-
Size
187KB
-
MD5
503f0e252ca15026b0f93eb069b37667
-
SHA1
196b56bd1dadf1b829bebbf7da0fd99b2cad908a
-
SHA256
9f25eac7a46836fe11312868fb5863e13eec97dab05172ddb2540b124b9f7019
-
SHA512
c39508a5f6ee1f344f68e1fc795b9a88c87a7d40a78e4e1e339d19d2a0390c615debf507dd4af7b8d054c7f621b25e5af414811a7d406095ab4bac0094f638a0
-
SSDEEP
3072:U2irbxzGAFYDMxud7fKg3dXVmbOn5ul1o1ltldnfjLZ6KjnV0gytJI2qO1XtAqCT:U2MKlWQ7Sg3d4bO7V0g4Ra1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2304 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2304 AcroRd32.exe 2304 AcroRd32.exe 2304 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2304
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59eca9f08bd42521f5a856e5c826483de
SHA1ba8c053906df73dbb1bb75413a01883650e3288a
SHA256425cdd087242d6a8081899b677c673b3d6332b5216834f3edb8aeb206862ccc6
SHA5123b680c0ad6038fc0f2f0592cfbc441f577c87e25fe44921ef3a3e617c157fcd68698d3d7f3657b42e7636b35425330e92706eb8a57ee7047fa36b975dc8553b1