Overview

overview

3

Static

static

3

ce326bef81...18.pdf

windows7-x64

1

ce326bef81...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 08:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ce326bef8128f47d0079e1d5a9777d01_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    ce326bef8128f47d0079e1d5a9777d01

  • SHA1

    409b1b51067e7d32d3303845b851275f065ebdcd

  • SHA256

    57f6b8c6c18a2f47ad48fb539d726e5a474b5d6f94c2c49a037ff404f0603608

  • SHA512

    090cde71c6cfd37dba84387cf222f4d52485b54c5145a6a5b34d848c350f212ab80808e478ec64ff569cd410530338fa6bc1ffe90f5003883e88f3117317f923

  • SSDEEP

    1536:OicJoZv7vplmwA0Q5cusdZb/rQxXdYOlKWqO9yfdJo6TUhW0W8pO7Ieu:1BUL5cfX/rQpiQ78oFWH7o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce326bef8128f47d0079e1d5a9777d01_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f18db792983da592e02dee6caadd2f21

    SHA1

    04f011787f05422c141fc16210da9fc6e69ba84f

    SHA256

    cdf8fedb59dac486ceb9ab8e71ff6e3e357f65eadf3f202ea75133cc33f30a18

    SHA512

    f88378ccf28d8d2907e22d62b7fb9cb86ab2efa9da57115e551de7d4a7c40e632dcb61fb311b5a432f331c9e35220c4ddd38873c1e99fec703cccef7aa829ef5

    Download Submit