Overview

overview

3

Static

static

3

2c3aa1e834...18.pdf

windows7-x64

1

2c3aa1e834...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 23:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2c3aa1e834d7f7b4ecbdfb84541586cb_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    2c3aa1e834d7f7b4ecbdfb84541586cb

  • SHA1

    1ccae90040417c4cc25b3ba7ab434211bb9a2b44

  • SHA256

    a10f00db36c0b7c84068dbeaabe72ad4cd34a63df08bc48fd17d79c2fb50ff96

  • SHA512

    aad8716c40d3f2cc48311dcbb8ed03fb1c4d43f295cff10be90d88be96ab7fc52d5e6541ddf91467d55f4b181afde4f944f94ce39232e25cf3cdf27ae33110e7

  • SSDEEP

    768:zX21OGPUpyS0+W2bC6EdCn13BW6Us4kiJqwLP:zX2/UJW2O3sn13BWsFi8wLP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c3aa1e834d7f7b4ecbdfb84541586cb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e334fdb5418d070b278907fbe7c0400f

    SHA1

    d2b2299f540d48752e29065d0fb243f1f0f81254

    SHA256

    332c9255dab0398bad7b9f5ccb9605ba97dc22fa118041c23c007efb2da110df

    SHA512

    7198c6e36fc1b275d92a040969187e398969ca88c14cdf9cb6d4c6f9870c022b71ba5ef7a06724172748169019ff6c49f8f0144074e24e7fa87c24bea5452b96

    Download Submit