Overview

overview

3

Static

static

3

dfa9942c3f...18.pdf

windows7-x64

1

dfa9942c3f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 08:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dfa9942c3f251c15c0faa13d347ec831_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    dfa9942c3f251c15c0faa13d347ec831

  • SHA1

    e5922834126739a574905b07db9be3e92b7c21e4

  • SHA256

    85180768ee142075458ce9d60de316a865acde1ef96e0c657de0430d0e33431d

  • SHA512

    f76e5a949b057d8adaaaa8729da6646ded9966a17d33c66586060f7b3bc633df5f8d3b10df047a2194cdc07a6b47605d2c87f456c02d3b9a7545290d987882e2

  • SSDEEP

    768:0KZCdnfMFanX9XzfWk3VORdWgjuvG9E2L9bEx6KG0Vum:idDld3VyXu/m9bM3um

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dfa9942c3f251c15c0faa13d347ec831_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d6ccd47df5934f4ee8fb880170030609

    SHA1

    13a39441313d5a25cb537eeba27c0ab425846ab2

    SHA256

    be45bd58ec64cc0aeda78c1b028ec2dd8f357cef82407d676694cda53354ba94

    SHA512

    17797f0f97ad1a2a29165f5348ee2bc379057246ce98c97d4098ac91157d296c8fdd7f731fac1cc08ee388c7019cfce2e92b89cc7311379aa2502ca372036d84

    Download Submit