Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 12:06
Behavioral task
behavioral1
Sample
71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf
-
Size
37KB
-
MD5
71e5cc7bbb908433c8b6eb780011d0f7
-
SHA1
02ca438c51522edc4e6c1f4df0d7f18a9b107e4b
-
SHA256
1ad4c5c48a51886acccb5efdec79e95c2c64dc625ca6390b118e4c084d74a7f7
-
SHA512
58695fc9c853d1ecbb6ab43b06bba1dfcaa23ffe71670b1c2d6028a9773ceda81b3e25b507cefc7bb41574e22dfdd0b1b7317c8e2bb66427e4a190db34ba9515
-
SSDEEP
768:YgGzpD/pN6tsrgp8ABZgoL+ox4U2KMnRL6P6df08t8L1g:1GFDpE+82KMnRL6PYfvCL1g
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2276 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2276 AcroRd32.exe 2276 AcroRd32.exe 2276 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71e5cc7bbb908433c8b6eb780011d0f7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD526114fc0be4e6b2709abc1e7ac3daa2a
SHA1b150e1fc8f598f3084ad295be2e8adf201157a5d
SHA2566a64a3da2202e64c53a2fbf7d7cbc9cfbe7d862aa9bdd89600ac706772b8c610
SHA51230934548c2b5a2b9651d3fa7d79ee9adfbd0db9efaa5307b6aacd5fb12120930de6af554e97f0e16e2b42d77c00a6eb53baf0be638ee78e86197e3b97f88afaa