Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 08:53
Behavioral task
behavioral1
Sample
9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf
-
Size
41KB
-
MD5
9131058908b01e3d1fae18793f2982df
-
SHA1
5023e277fdebaf20dfda72e96b9a5c0d14a60703
-
SHA256
d79b8e95ece2cf20aca20ef60a83be09b41e8fc7c6c05e69b1f9047b54bee268
-
SHA512
26c39ed3a1da91aad96ed3ddd4997fd7506e1d03c5474f5cb7c914ed16bbaa95949c19bd628d50162515bbfdfe26742ffbc0055dad64154effcccf7cb9489e55
-
SSDEEP
768:YgGzpDXI/QSgdp6+MIWrs51b/UO5vUikIEcRIizUKoDs52bpQNGB5xnQK8zVL9X:1GFKQp0IWwTbtvops521Q8FMzVL9X
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1808 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1808 AcroRd32.exe 1808 AcroRd32.exe 1808 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9131058908b01e3d1fae18793f2982df_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b6b5647d5b42762508836a5640e422cb
SHA16d0a816947a04e66ce221207e57a8ae2e770216c
SHA2569fa489a631d450b06d2d2adc2464c5773e4dbc77ef3d5927d6f1aaa88d8fc9ef
SHA5126edb462b49e4d4fdb7a3313ba70746e2fd3622a0b0981855e8c7385aac256be5918c175775ca40b5e77af382ee204c2ce631d74cc731bf14e8ebae947fd16a3d