Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 11:00
Behavioral task
behavioral1
Sample
7cb887ccaf723856fd014d09c546d84f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7cb887ccaf723856fd014d09c546d84f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7cb887ccaf723856fd014d09c546d84f_JaffaCakes118.pdf
-
Size
35KB
-
MD5
7cb887ccaf723856fd014d09c546d84f
-
SHA1
2266f18cacb32bdbcab5e0172240a9e4ff22f507
-
SHA256
466b0d35fef837ffa69918d27877f4d022f69aa160c8873b280ecf87247997ce
-
SHA512
34e55ac89cfd3d147d11d27935fcb5c2512ade636e3d16d18b53bf5284e5d41e4cbf6432c8e00d5a361cdf0dca78c23229682be5cb841d1173e18c1a8798619b
-
SSDEEP
768:QVXuMZmwgCLWarrx0FQuIF6o6DJedGJ9W0Trko:aXFZmGWSrkQH6FkG/LEo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7cb887ccaf723856fd014d09c546d84f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f0a09bf0bd345943b22fe7e69bc6b3d6
SHA1981fdf44f590e2c5bebf9d5a331ad617310da8f1
SHA2562c680ef30769725665c859ae9d7dec342e522ea9e0e66e3cefdd97c6b57254f9
SHA5122bdd68017304a0826728351466034c147c4e7d59636133ead3f16bd7c42fb0a5b1332006dc7e84be0920a4470301dee1878fa2b78d37b9e4f56d3ff04ef77b4d