Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 19:51
Behavioral task
behavioral1
Sample
7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf
-
Size
43KB
-
MD5
7e30b214afa2ae95b6798dee4bb8cda2
-
SHA1
1a890149fc9cc3c0f35d9c52f33ac59d74fd7845
-
SHA256
d43f0ed8f8a92c0c1bc6054438feb7049e2429b20e90496f911a76c983a94e4e
-
SHA512
0803b74f4b9500709cb62e7c088c895b901f0ff1333cebd870d804e212a8fcf44b6e98d2a31d6403911414b459b84b26d8c57e11244b1bf00c0608da2827c1a2
-
SSDEEP
768:VgGzpDkpIUhXRJ3sPZE08otwN/sVQaQ05iIvm60LwohKt0RETbwCAHbJaiNz2PLn:GGFQpQdQ05hvmnKUEP0ac2PL3YAF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2868 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2868 AcroRd32.exe 2868 AcroRd32.exe 2868 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e30b214afa2ae95b6798dee4bb8cda2_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2868
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD548de97de93e55ecceb29eda8d9781d92
SHA1c304a7c80a896dc5303bd1a4f85c1fbe3101c418
SHA256f6921a17fa292a5fa9545c85afdb43536f5e07f7d6296208a472e55f9f8597e0
SHA512b9295824713676723c3deddb4bae9e6de353a724b7797df88975be0eb09c2edc0eda31b7943916d3cae3a4246f77a5a1808e8459da41e6c3550b26b86904b5b1