Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 07:15
Behavioral task
behavioral1
Sample
cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf
-
Size
81KB
-
MD5
cd2187667cab3a1203f4be7d8232161b
-
SHA1
098c31616ae27bc9f55675149d28ca09085ecf95
-
SHA256
3e2ce2fc672d200bdd8310b54bb6bc620bf1b5937e470df3f8822c9854b43b3f
-
SHA512
ebd56fa7c8b93aa5186d92514b3311e6265dfd17003ec7a9c347f4a28433f21629edd83fda454f84e9c56640b827a89f871f9ee0e0a7ee62fb7b5cd1a0f1e248
-
SSDEEP
1536:7kSNMEQ9uJPSt57VzehfPsBTS9d7TzlDeXRQy5Y/qWxZay5WxApOGzW9uYfgFvu6:ASNMR9iSt5hyhfoS9J/lDVy5YLxZayeI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2136 AcroRd32.exe 2136 AcroRd32.exe 2136 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd2187667cab3a1203f4be7d8232161b_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136