Overview

overview

3

Static

static

3

884a913061...18.pdf

windows7-x64

1

884a913061...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31-05-2024 20:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    884a9130615126b6e6eadf3d195723bf_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    884a9130615126b6e6eadf3d195723bf

  • SHA1

    fe1b5f413d8e9f6c4cd4f327d42ac178b0eb5dad

  • SHA256

    31d919c8951cf0d384c3fb2176c1e14f94d0f0d921f022029a6a0179deca7439

  • SHA512

    4f8d48dd7bc87e94869e8cf9b5cdbb61a806f410b75a811de39bd9684e8267968c99e52bc596fb02ea2c32a630b7b2f1033cd38d37f26d14a1ae6c8472acc69d

  • SSDEEP

    768:PgGzpDhpxhJ6Z8mWphYB5hKjH7Y/lkOhBLMxZBtwCoWCKGwB1o6me2vaPpQ+gaPO:4GF1pXjbs1hqZBOC/LmeXQZaPNs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\884a9130615126b6e6eadf3d195723bf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a2647c1b660192a482906a63aae59f80

    SHA1

    6be35e960d6daade97d4c62bedd0a00061704262

    SHA256

    efb06b6936d87a354f94b1ff3954c237af42c388eb5742c39234f22e9bef4cc7

    SHA512

    6554bb4191cfc33939e0c7cc12c1700abf6fd2b30dc54b194a9533bc1162838855e8f2b8af82eb7429e8db33a52355d76461ae0523a56130e352990430fef2fc

    Download Submit