Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
03-07-2024 18:19
Behavioral task
behavioral1
Sample
2350375af6a725e0334da68c078b7663_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2350375af6a725e0334da68c078b7663_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
2350375af6a725e0334da68c078b7663_JaffaCakes118.pdf
-
Size
77KB
-
MD5
2350375af6a725e0334da68c078b7663
-
SHA1
ab9c53d3fc7ced15568c09e11b46f0f69af52140
-
SHA256
08ad51e19fcbbf93876eb152d678ecb28177e0de8aeaaf20604310854f6341a2
-
SHA512
828ece38494a5c303be381fe9f4a6b80acc52a8e5117d9042cac39aba404766922cc4c3a5de32ada334afcb0f84793317aff4e2dffff27b4914fa81ad06b418e
-
SSDEEP
1536:03Lf0izj61DH2gzxswlT6oFgCmVEBOiUQNVEy15O+pjQaG5FrgXVNUkPi:YLfi2BwMig9qOiVVEyTr5QaG5KFmN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2350375af6a725e0334da68c078b7663_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52195c93e825f58ba94131f27a060f80a
SHA14efcb9940671614b4e0f9e03acc226e2e389ec9c
SHA25603033206d3ee81a6c98998429364217b5e8e9c39aa5c03b2c4bc9aa9ace4bb8c
SHA512804023e67cda92184468cddf759f5a29f299aedfbe88c9be19f9bb454f1799561418aaae3524233b1098c5329fdddfd20d58852f04545fe380637a4dabea1a21