Overview

overview

3

Static

static

3

29c4a52958...18.pdf

windows7-x64

1

29c4a52958...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 11:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    29c4a52958ecdbbf1ee95b184e7c48c5_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    29c4a52958ecdbbf1ee95b184e7c48c5

  • SHA1

    f97bdc9a63c89e2723fa0ab6f2903f47257bb118

  • SHA256

    ae3d2edd2a85b9a4d04d19f218922b6fae575decca7c8b315a60770000328c0b

  • SHA512

    094c04613ffff41c8a221ed643ff0167d73bd952c844ca98f48b233cc327c4f998ec573013d715c37d3f3f9cbb69547df9417ca97555495a6ef2712cd98488f7

  • SSDEEP

    768:uXuMZmwgCLWaryCwI0nEwdboVd5CBvUTa/L:uXFZmGWSAI6E2PKTa/L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29c4a52958ecdbbf1ee95b184e7c48c5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1732a5fee8cb20a0ef537c230aaf761f

    SHA1

    25b6da3b7ddac1514dae756409c3e47c04295061

    SHA256

    b7fc1e7023a6535a79056cc3e23cdf025af8ca0b121b1745f07f0a0b92c0b149

    SHA512

    a71169a00f3dd35300722563586ee8a02813fd67a99d215e8e940be4e51af22d20c2be26aad8c3351864c058ce0881f133f85a8182bb889161eee182333771ff

    Download Submit