Overview

overview

3

Static

static

3

eb45c61353...18.pdf

windows7-x64

1

eb45c61353...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 14:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb45c613533877bcd6d05732281aa19c_JaffaCakes118.pdf

  • Size

    103KB

  • MD5

    eb45c613533877bcd6d05732281aa19c

  • SHA1

    402702b1f7195ec549ce032e4332c163d81ab109

  • SHA256

    168906fcf20a95c7966317235dfa80518c75498069b8ccc06869d52b33db0f9e

  • SHA512

    6e89906627809447ab802a392ad1872c85d88669453508960408cc93286d7a29600c9d1141868b83e7e4d009e7a60a10ea4f0bd940158498f0ae03a519baeff6

  • SSDEEP

    3072:CRk8yIp9fG7vtAM9yPfkdJioQwA4YUiTa819zSWZ4+G18Zm5:26IpoDeM4cd8oQwlYhThxtjY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb45c613533877bcd6d05732281aa19c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d656f2a1b16c391595b216ecbf2b6b2d

    SHA1

    d1800f32232c7c6f14858e7bc9bfdcd3485fe09d

    SHA256

    07e7808449a06d54c2aaab8bb94b8bf9223fb35582685519a229c0ec9ddee039

    SHA512

    c8dfad16c5061803cb094ce314f7b9bcfbc442f2eb194f7bcdbe9360fc1d942fb690a0ac752458de41ed19f53a1cbcad7eb7bd57dde743d2630d484ac10bdb72

    Download Submit