Overview

overview

3

Static

static

3

00cc955db7...18.pdf

windows7-x64

1

00cc955db7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 12:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    00cc955db7b41ad6bfb28120c3b2c4fd_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    00cc955db7b41ad6bfb28120c3b2c4fd

  • SHA1

    f0548f3569aa42d4c402b274840e7f99a9fca68f

  • SHA256

    7ea436e134acc0d43d5a9e77a1940a0320f9154f319e34868f21e1014dd90fb7

  • SHA512

    863df81afaddb8ae556f30b678e4c98f028cbc0a79d0c39c53e1ea752dd9e858586b5df2a993e28031b4c51d8e09cbf9cbcb71e2a16c4fefc214941fb5595a7e

  • SSDEEP

    1536:WGFG+p/gTgjqK/cRK3JJFIZYOcP1+iR3fL4/zNyTfsy:vFDp/nqK/9DFIGrP1+iRULNyt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00cc955db7b41ad6bfb28120c3b2c4fd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fa0427f3b990bb341a59bc6686119b85

    SHA1

    ea53aefc20cb8d0c047a37140d178fac271e09da

    SHA256

    6aa57b5a857c57b166d73ae5698a80362723697e002aa7db42881c7ff7f51f3e

    SHA512

    cbc00f89064542f0007c9d925f93152ecc0553a8b9cb37ad8ea7e80a56bede4662450f5ffb7a03232a59a12f32222eb22847cb71602a0fed82c9ad0c897855f6

    Download Submit