Overview

overview

3

Static

static

3

5f9898a551...18.pdf

windows7-x64

1

5f9898a551...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 14:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5f9898a551e1c530f30012823cf24c82_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    5f9898a551e1c530f30012823cf24c82

  • SHA1

    95848186743be481b718cacbfc9dbe94b63a6613

  • SHA256

    c9edbaf13222795c6e4d0ac232f5e0c882f1cf366da987a40e235441c7b58524

  • SHA512

    40925b2cae1f7f44e6ad65207eb55a7a6e858f8e63128b7e96ff6811faf59846cad99079a9d33bc972628c3a5a4e7e7a4c5beb96c12207b7a294ee482de44920

  • SSDEEP

    768:bq2w2hJUy974lhIAhi9HBRFXmPZHk3yL3m13LLQSd/ng5mXVJChSE5fXuMZmwgCk:bq2Jr74lhIAhi9HBRFXmPZHk3yL3m1bT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f9898a551e1c530f30012823cf24c82_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1f6358bb62351663f78f3a0e2bbda990

    SHA1

    86e7ee26cac2336fb1c3f1135a7d05522b3f31a9

    SHA256

    0f8f10e034e50feb6d2cd87daf36eafe8205009d76b3c135e1db0afa2a76c0a5

    SHA512

    169cd61265af9794ce56de98b82fab93489d48746a2735f00668ec25d29b00fdede519da90a6352fed60b4d0552678e201126db11c049d36b0f44fb35ccc3183

    Download Submit