Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 23:15
Behavioral task
behavioral1
Sample
23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf
-
Size
83KB
-
MD5
23cd43a37f29e61bee0f4bf44d1bb2b1
-
SHA1
1e9eaa7dcf3c8de4f53ccacd73ebf88ed1393488
-
SHA256
76347a478d9d8aeb9238e0768cf541cfa1644d3cd31cfbfb705b265757676744
-
SHA512
11f25a8d0dd46902bded35fa73dc635ef386ff6e6f188b3bdf6061e071b12c7744222c1e8c5b3e39bafa6296275de96acdd30bdec919d9bd7421cc07500f3cfc
-
SSDEEP
1536:P/KDNtUgCstl57dT/obRwSsnyqBVGWbrLjD6QPlMEIo2e/oT5wNWXpO/K2MX:HKDNtU5k55TobRt2H9rukMEIe/oTen/s
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2164 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2164 AcroRd32.exe 2164 AcroRd32.exe 2164 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23cd43a37f29e61bee0f4bf44d1bb2b1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52bc5076b1c939483c2f64fceed39444c
SHA1ffc9eae8e498e11e11d7b51cf2c44a5649a39424
SHA2566a3d16b95190380029586085682f621b57cd091ff0f438bccc5787802f72e0e6
SHA5120dfc98443cdbd2c9e8c94cfb1c61b40b9636a2858e00536f86e7445004687004673f5a294aa26c1170714163fa9bcb02b5fe62bbdd38a1388e22a3b9a44b7dd7