Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 11:58
Behavioral task
behavioral1
Sample
94c242395970728374bea2e18971ba00_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
94c242395970728374bea2e18971ba00_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
94c242395970728374bea2e18971ba00_JaffaCakes118.pdf
-
Size
63KB
-
MD5
94c242395970728374bea2e18971ba00
-
SHA1
4ac6bd3769565582b66fecda572cada44c6bdf88
-
SHA256
ec2769da2a081c2525f312f728b81932f06aabb700671a2be8668701b8b892a1
-
SHA512
c6fc4c5d50c73db88ba38dc30a1f1cbb65583223534f25251b7458500cd053eeff318e7d597f0f213eb249b596bb927585053ac2817721a2557cb68c346ed9e2
-
SSDEEP
1536:iGFVnWuQ3LtnzDlXHx1mtMgdvV5b3COzpgHhycCOIrmJ/g:bFVnYbtnzlHDm+gVxzCBEOIrP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2192 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\94c242395970728374bea2e18971ba00_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD511c15af561ca5d44e3cbcea7a0184d8f
SHA1084ce76db4cd5f9b5557e60df8fb130e549465dc
SHA2568f398bf09b4b32cb38dd78b69772899483b7ea69d3071330cea18ba1b5e291a1
SHA5123bf7fb3bf2f31a14048594d67f7e932636c4e0dfe84dc72aa956451dcf77e835b79a296e12e747db6f1117c5264735821b60c7b9f69fd6d82fbc4c309afb42f5