Overview

overview

3

Static

static

3

ffaa547231...18.pdf

windows7-x64

1

ffaa547231...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 16:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffaa54723157eaf78cd721fb40c2362f_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    ffaa54723157eaf78cd721fb40c2362f

  • SHA1

    e493bcf477060b77677e6e6f693d76b08dd22885

  • SHA256

    3df4ca1ecc623b7d531994d14150de658955cce0c6aeda2cfd537c4f1df27f96

  • SHA512

    0d93f1c150b99e2b42f4d15ccf1d321195582f63bfae8a41f6f08e107d1a5129ef9acf2ca048a76022b01d4547f79539502c0cb2d23869e5a35e300cce27269b

  • SSDEEP

    1536:eWD7xPCKhjwpolhAKvxnjf87LwPSNe7DlONoFgTu6ggK7/IWFtM1gTCG5W8pO7sj:NxPCCwkAOjvPSY7D4jE/VtM1gGGQ7+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffaa54723157eaf78cd721fb40c2362f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    998c2afa0667e9cb47dea0260f086558

    SHA1

    0058984bf3de7027d1d32287a3715163b5ed1dfd

    SHA256

    079ed3a7f7a6c5d5f23ad1ed12bcdc13e688e72b7bccc65a18297eb25a8c6de1

    SHA512

    c8c91df1520947db0b1ca90004d05bf3d422d849b852b75927ea245fbc8ec215afdc673b483bd5b7c8c4e40a37ccb74be2585fb018bcbf3ac241865f2ad79461

    Download Submit