Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-06-2024 19:07
Behavioral task
behavioral1
Sample
98fcde55a230e0814a3ee9baa9cbfcbf_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98fcde55a230e0814a3ee9baa9cbfcbf_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
98fcde55a230e0814a3ee9baa9cbfcbf_JaffaCakes118.pdf
-
Size
38KB
-
MD5
98fcde55a230e0814a3ee9baa9cbfcbf
-
SHA1
3946e7593e24504cddb3470fd7b605548ce7ed34
-
SHA256
fa0eb7d638861f6531b2402de0a90ab93490fb7ebed583446a24d3dd1626f417
-
SHA512
f8ddd24ac57afbb9a32d241a17624d5a126963298e686eaa112b762657b577c9b2e8ab909e1730d7b77c0c08ad26e94dce8c5c03718cabc2b118769a30e5bf92
-
SSDEEP
768:tXuMZmwgCLWaruE5Hpx37620SS2JM+bfCp2P94I5MoP+rLpxdK:tXFZmGWSvj37620SS2JM+nPuGNPgLpx0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2380 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2380 AcroRd32.exe 2380 AcroRd32.exe 2380 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98fcde55a230e0814a3ee9baa9cbfcbf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2380
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b7646c7973331452ce099a97d45189e3
SHA1464aa9d1772b24c28546e9bfaa0035eae2f3e0a3
SHA25671bca47de5e57522edd80c2f1790c6801612260152fc7fc7ad7191d96179dba2
SHA5120cfe2611d66d761d22e52e568a2a93ccc5f78cbf03469d2410cc9a841f007aa790418eeb99a5f3521c6db85a330c439c8523361bea1cdf05e4a742dd6ceab501