Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    18-05-2024 10:53

General

  • Target

    545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    545481de5124db3daf364a9da3c9fb12

  • SHA1

    736ebe735402ee0043d40c1c0f077156debe12ca

  • SHA256

    67eaf71240699c2c4e8c5bb9bf1a4820cc0a126376fc3ff040972b471341a038

  • SHA512

    53b177e88ef4fb5882f9fed4407737dba6ecff473edf9b65bc18bd91314b1afe4c6ecf2995be3149f0bbbe8df90d2750790d40dc00c0682fa7996bc827326436

  • SSDEEP

    384:diGYikFZRFuBCM46ResxaroI7CC/0x2iMKW+PVSbvMm:ZYt9Yn46ResxaroFC8x2CevF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\545481de5124db3daf364a9da3c9fb12_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0fb616532ebe49ef5100aaea6abb285a

    SHA1

    01cc2c566b5583833437c44b647b392f71a5a78a

    SHA256

    727a0d871c874c7ecef8a418ae0ca1066778ae8b5d94b017989a51b5510a0b93

    SHA512

    20f0fc5e481af608e3aac84fa046e25a33cf52b0031d3e63b1a40bd01aaa64ef080fa2c510a5caaa20bee70ecd739b437bad2ebbaf842ebf63867d873ccf1b6f

  • memory/1900-0-0x0000000002AD0000-0x0000000002B46000-memory.dmp
    Filesize

    472KB