Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 04:59
Behavioral task
behavioral1
Sample
0caaa6df7e12bdb93fd76e02f0157017_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0caaa6df7e12bdb93fd76e02f0157017_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0caaa6df7e12bdb93fd76e02f0157017_JaffaCakes118.pdf
-
Size
63KB
-
MD5
0caaa6df7e12bdb93fd76e02f0157017
-
SHA1
3f66efd1dae5afa7edafd7230d9f7a783e096ddb
-
SHA256
35a1e339e505bcda784f216a6adc286416da8d1d77b2fd584c738a42f73cdade
-
SHA512
4d3c446c844d37f470af57168bb66a2fcff0697b80cca97561270a908f61b5bc7af015a3ce1f52b5c6f32162d7fb2c5725dedc3529616394c93618d0bd8a1ecb
-
SSDEEP
1536:9OkyCAGTD7n5WPL0ScAnRKV2BJHT40VJPE0ds:9yCF7n5WPLfcAnMV2BJ7fEl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2912 AcroRd32.exe 2912 AcroRd32.exe 2912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0caaa6df7e12bdb93fd76e02f0157017_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d26acdf217ee9e9f99a878616bdc6108
SHA151f967ed0002b905e7068cebc1a86619b4d0747f
SHA256cfb6bb93a78ea33d0b1501c73899885a52a9da78c6e36121f97216ef4833a907
SHA512f51b7084f94d0b5414618a014754c44d5ec1e2dac8d593ba7ae1e5f36f7a28a58c1b57507eca57360c3a3db46dcda5ddddda1f9fc868827d1cce4e19f057fb5e