Overview

overview

3

Static

static

3

ff9d346778...18.pdf

windows7-x64

1

ff9d346778...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 15:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ff9d346778323901fcdfcc2ac7cbb29b_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    ff9d346778323901fcdfcc2ac7cbb29b

  • SHA1

    06d2261f1a3892cdfafeb20cb98b0e18e7fbba44

  • SHA256

    050a5a53a8b0421488980ba7ef6e04b8ab921e2d67e538df2054641830fc4bcd

  • SHA512

    0deedcfd1c57e562950241e093338d0896c86fa895fcaf46d83f4b7be297743a687f2318e6ce2788562c18bffc1cf2237e87f5a4ab7170e3001282e9df13d5dc

  • SSDEEP

    768:yNtvx0DFLJp9lOsQ5emEK/e4HHGPbOAbbUYDPK:mx01JpniemT/e4nuRbbPK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff9d346778323901fcdfcc2ac7cbb29b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    31851952cfe4f2740a141538ff4446e3

    SHA1

    97a04984882c34bb6506af85846f356857f7a492

    SHA256

    d9786304953875d183a3fc11416dd44f2bae72d54cf2348d8358bf3acda41384

    SHA512

    31dd4c8db5c7d99c37beb9edacb29cd6c73d00661ef5b13dec3614869d62bb121b11b3120da48018c18610b210854b18253f62182ccf509f0993bb350c869ab2

    Download Submit