Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 14:46
Behavioral task
behavioral1
Sample
2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf
-
Size
74KB
-
MD5
2888eaaf05170c02401f303fd17cc046
-
SHA1
53f56eac2409bc976615e51f585ccca100061b7e
-
SHA256
dcbc978bd444c6c4a1c7288efd836a18828447067b13b33a19a774c79afc5d2d
-
SHA512
61ab96390bbc92089b097d5bed856c4b2b826e1a201af16f40215d1ea2360791465c772803fc6dac0fc3bfab62f9b577d3ac4b71e478f29416cd202d6705307b
-
SSDEEP
1536:EhwwK6OJfB8aso7vfG7m7sxZcisk6agiLKiSJlWMfgeTiWAB2XWQpOCJwwQPDpwt:AeFB8IsxZ4k6FiGiIoB2CCJ4a
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 840 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 840 AcroRd32.exe 840 AcroRd32.exe 840 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2888eaaf05170c02401f303fd17cc046_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:840
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dfc3ad2ad0dd752346eaedd1de7cb00e
SHA177dec08e99251f6e952c630f8fc46a6466d2287d
SHA256d10d923b5a193ac6d832b6a13156fa3589eb372da0b667ab15c96ca918e1a967
SHA5123f92f5cb3fa0c4a013b877000415089058a218509e665d0460fb8c2329357c91e6903cc22b7ecdbe9271981c5f5b4a132680caeed56d83762aee25adde36e587