Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 15:02

General

  • Target

    fd0716a4f2c2e64979321f99ac4c336b_JaffaCakes118.pdf

  • Size

    14KB

  • MD5

    fd0716a4f2c2e64979321f99ac4c336b

  • SHA1

    e878beecfcb192cd3004a33fbf249ce4325a73cf

  • SHA256

    16c54e55081a222875fa5086eaa28dcb62c9b64ca93f14242b4e2d1b3fa066ab

  • SHA512

    96f87a3577bdf5622c2ef10b9438bc2e946bddf174556f7703f97a3b9204f53a79b549a76df9080667e1b3a550a7cf6cb688260207b984bafde224f274ba3b21

  • SSDEEP

    384:shza9wAO9Gi5f0vsy0xSarxQi/60G7tXN:k7ZGi5fQsy0xS2xQC6dD

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd0716a4f2c2e64979321f99ac4c336b_JaffaCakes118.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2240-0-0x0000000002FC0000-0x0000000003036000-memory.dmp

          Filesize

          472KB

        • memory/2240-3-0x0000000002590000-0x0000000002591000-memory.dmp

          Filesize

          4KB

        • memory/2240-4-0x0000000002590000-0x0000000002591000-memory.dmp

          Filesize

          4KB