Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 17:12
Behavioral task
behavioral1
Sample
23285e5fd150882b73042785ad97d0b3_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23285e5fd150882b73042785ad97d0b3_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
23285e5fd150882b73042785ad97d0b3_JaffaCakes118.pdf
-
Size
85KB
-
MD5
23285e5fd150882b73042785ad97d0b3
-
SHA1
973e3ce3c80404e75863964ec9667662c18402c5
-
SHA256
3a058bcb2c9e5760b656960624ac854086f824861283ebdb8cd42ad4f5840a31
-
SHA512
f11747579d9f31add4951cbb35da179d379275db15cd80063c6582f04b0e61c2990cb012fb172068038953343f44db55f1fe8b52890f40c6e212d87883e38530
-
SSDEEP
1536:yxzc8SosiUl2JegpuqZUp5oPXb/kNeEBvjW7D9I+T+BpXspdFY4/X2zWJ7tXQIrn:izXSoswegpulDQr8NeEBGRMGFh/G0lQW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23285e5fd150882b73042785ad97d0b3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5238a5edab638d7041d863924156c8a2f
SHA17323c9a80f159af6db5d61d46f14d72e471281fb
SHA2565a82ee52677846f6c23f44b1c2d0ee4a1aeb464816679742b45af3387815054a
SHA5125ff0b64a01aef85fb23b674fda78a32155c0e12fb99669f1225ae20d01858e4ff69d2c9db32c0cb6fd4826667737c9bc2170f7887617c3ccee56c66e63e502bd