Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/05/2024, 10:42
Behavioral task
behavioral1
Sample
63037ab082b515a228b3d880a34b45e6_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63037ab082b515a228b3d880a34b45e6_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
63037ab082b515a228b3d880a34b45e6_JaffaCakes118.pdf
-
Size
46KB
-
MD5
63037ab082b515a228b3d880a34b45e6
-
SHA1
c2ffac5728feeb7a4038753fce46fad8a097d8ac
-
SHA256
03bee9b7d9574dca30528891c149a6758c1b3d1dad9a28cc2ec091100f9f9011
-
SHA512
44f96c511f155b90f5fe884c3e0e2db295260abcbe6da6cde3342dbbf177583c3ca80a9c8765b89c94279f0c1d19e39a8d86273ec339062560eab87de30f3e4c
-
SSDEEP
768:AyOktmHBT2JClxvAwOrkTb/vIlwl7I+he9fBRwXq0KV6HHkQ3V1GE1spCNJIboDl:eCmHFIC3VWkTb/wlwl7I+he9fBRwX4Vw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2336 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2336 AcroRd32.exe 2336 AcroRd32.exe 2336 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63037ab082b515a228b3d880a34b45e6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2336
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD541af060a6a25e812b0cb75faf78ca2ac
SHA1d9f8676a9a55ccf0e3c8f652848a52a7fb8c51f4
SHA256a451ab6652af81df028d6629728098b3237c35a078d001e72a70a21e765b1f47
SHA5126ca9536de2fa213a388d571bfe4d4bede2e2cf73f2f57fdb7f61a04d170966b9707e9494435737a4d9649f85261a913ccc637d2ae75afcbb2170c67b993503f2