Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 05:45

General

  • Target

    3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf

  • Size

    25KB

  • MD5

    3305158e3a076a99bfebf5a8a4e13c46

  • SHA1

    9cf5adeed3e30f617c3688f5eb9f5f5c10353769

  • SHA256

    ae66be448ec66f7c03458de229344f0ec5ffe4572a2252cf22a56975ae1efa2c

  • SHA512

    ad595fdbbd64350214bcce8162e6fe904bfc7d10a3604efa693532f4f3ab8f737f67eb27c67552550ba1e4bdcd1fb4dfc8537b28abb82e9883b9fe3753dd3658

  • SSDEEP

    768:VzEzPvr+J41TzVXR1Idn9slJbBBdsB5vpS1kJCZOIlbIYWdk2n8NjBoWnaPKhQhg:ar+ifdGF2mK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3305158e3a076a99bfebf5a8a4e13c46_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3296a57f5790c4739304db4fea3411ed

    SHA1

    8eb7e8467b7047411205910b9a397c640f9fbc94

    SHA256

    d8321ad24bd1e4e7df1629a346fd991bd5af3bbe9a19038de863627ce7e1d337

    SHA512

    f195962eebe3dccfc99003a224fc0887090835bc1ce604aabbe6c72f5bf0803718b0b3e8757f367d5260952a87d996f99ccaa5d2eaa75dfcdc37fffd51105677