Overview

overview

3

Static

static

3

fb24763953...18.pdf

windows7-x64

1

fb24763953...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-04-2024 20:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fb24763953931ee1f18aeb4687dafc2d_JaffaCakes118.pdf

  • Size

    104KB

  • MD5

    fb24763953931ee1f18aeb4687dafc2d

  • SHA1

    ad0b180ff03380dc250c6362650d379b76c9fe5a

  • SHA256

    5923bd655f1ea607b946752313cc48128b9f76b1cff56e0e0de9489c36f0dcfe

  • SHA512

    9368c36f3c872b24e71a6fddc61eafed8ebb54eb2af1288907f3d3bda23ed827d3bace654d38a043d9894473768c333b1c47ee9faba8be11389bad8faf67659a

  • SSDEEP

    3072:UMCjug/P5cYnVTX46M2piZgcjQnX2eBX0Fxzqam7wjih7I:ijbPeYnpX4PZgPnqvzl/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb24763953931ee1f18aeb4687dafc2d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d469c0ad1c5be2d2e9573aef2c894ef5

    SHA1

    0b5a7239c29e9c52439fdac6581c3b69eb033c4c

    SHA256

    c013e6d3fd8474343501513feb9670f4ed6911f2624436b17ed2434dd626f3ac

    SHA512

    39319455322d88005d190494e420364be143e6d4d26e4086f4214044284086f871b73e3f2df6155c6091ca2391cf978833cb29350bf89707ed9dd24126a54bdf

    Download Submit