Overview

overview

3

Static

static

3

e208c91440...18.pdf

windows7-x64

1

e208c91440...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 10:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e208c914400e704e17475ae3b995c5f1_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    e208c914400e704e17475ae3b995c5f1

  • SHA1

    f044f067612122f7f539e6fdc16f9e61a0d65825

  • SHA256

    c9ae5e2e2db7554e1350afd450205c58f96ba7a866894bb60803109e3489f09c

  • SHA512

    99b078779cdf072f6416e874c14634493ec60e1a0c5b4abd14809e5ce39cfeab8b64e224e830b498a2168fc7809e605dc471ad6dd2c7f56700fec1051e5d3465

  • SSDEEP

    1536:jnL/Tej++/peh/6xxnfy0A3kk6g8rgj3bOpBjXaOqLz0mL4WGpOKCWAA20+/+fnO:P/o+opehCXnfy0qD6RrO3bS1XizTNKZ0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e208c914400e704e17475ae3b995c5f1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d34256d9e7754cdae0e4e1c6ee053f5f

    SHA1

    178ada86138a16d2d2098cb33bf331306c7587f0

    SHA256

    cbb3d8d9a6768e5a4bdeb9801eaf3069e6c81e5483dc977fb943d377cf91d0ab

    SHA512

    b91d0d94f8e7760cabf41ace8d5bb0cc151c5b330a099831ceeba542a267d801878d3212074d4c9a7987fc31c84894af52a9b0fd95a95d8b0afbf849a8b1f2ee

    Download Submit