Overview

overview

3

Static

static

3

0aada24e9d...18.pdf

windows7-x64

1

0aada24e9d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30-04-2024 23:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0aada24e9d1cebe4a54a67e51d2523e1_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    0aada24e9d1cebe4a54a67e51d2523e1

  • SHA1

    c28f0cccc12ea10be19e02411217c701879a91b0

  • SHA256

    1a1b561e270e41dafb5d10e689b616f7212bd257c94011b13d266e9de330d5d4

  • SHA512

    d3085871f6a628f812e77e30728d8da318d06824e679efd4189a881564c5225721f1b627b1d13ce2ab1251dbd931a530807334af06a3b28bfd9290f34ebcc1cf

  • SSDEEP

    768:1gGzpD+pBixhO7Q+j81tw7chy0rFaV+I2HqOS6WnwSZgDMxw36QWjWV+REw2M3P:mGFyppchnrwL2HqOS6WB1xHFjWAR/TP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0aada24e9d1cebe4a54a67e51d2523e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    56140e6bfa9087a26ca06b52ab34c21c

    SHA1

    7c65a1360275b1e2736dde61a0a86b15d9d84653

    SHA256

    148c518ca811a6f1690391bf22c710c4878d4a954bfc768ddaa40b021c4bc96b

    SHA512

    bf2bcc8b721dc70626772a7c7ede5866219a2b714d39b86e6c74e69fbcf86f59ad490f701c949c09a0e63f9c55595f919bb8667b277304c15caaabf9a9c140ae

    Download Submit