Overview

overview

3

Static

static

3

df18fbe71e...18.pdf

windows7-x64

1

df18fbe71e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 07:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    df18fbe71ee3f0d2058b0b324dd1d8a0_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    df18fbe71ee3f0d2058b0b324dd1d8a0

  • SHA1

    4936e909827ef7d7e7bf2329498a770421aee4ab

  • SHA256

    265501071156f4f56642be3d41295d953b82cc034216bafd9428a958a8495422

  • SHA512

    f4c6eaab37861ad900de2d4f068800ad643af740b0bb93dc9fd5e1516f638823f54b2b1d3f19689373028d003b615ea049e60c88d11fc7fdce7de876ba8eb18d

  • SSDEEP

    1536:gnF1qiTKE/rJSfyzMVTD6zhvI8Plmno3WHpOvOcaxaWXwEgyRd:avTnJS6zM16VA89EAvODxSEgY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df18fbe71ee3f0d2058b0b324dd1d8a0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    46019304c82d4481f43020eadb9edea8

    SHA1

    c209d9a66bbcd928f142dd8ecc853ad61d98321a

    SHA256

    1f8a9057068c5807d0402c2c05a72b24aa02e4bc392dd646a95ef464ac94eeec

    SHA512

    77534e7bf9f056722d5441c2b195ee5d75a62bda675de22dab5574d3fdaf432e348084be8ab692071f8668e74ac2f5efbec467f1937e5011a5274281498087fc

    Download Submit