Overview

overview

3

Static

static

3

9539990a36...18.pdf

windows7-x64

1

9539990a36...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 14:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9539990a36dbe9d13ada388f1199bd71_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    9539990a36dbe9d13ada388f1199bd71

  • SHA1

    e05f7ffb377d29c3e86749e1a061fb4a4346ca72

  • SHA256

    2da1d6de2201ea8197a6dde184846f5a5ce9e897ad198436368c41c728117876

  • SHA512

    2ae6851c1072479ae05d7d20b4e9aeeebce775834d200fa2270a0dc8a4fb442aaca3ad6eb07f86a711b119d64e599b8af2cf2e258d878c78ac78aeb352e0bd4b

  • SSDEEP

    768:sgGzpDZe/1nY9xYjYCEYALtau22KSVjGmr3Iyq9q0KnhjYS9+QLJWIGstzaJ:pGFNe/JnEYALtau22LG3+nNYi+Q0IGsW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9539990a36dbe9d13ada388f1199bd71_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    02cce7860e8fbbc950ca7518fd790045

    SHA1

    1b678c43a5ac3325d653f26a4b8941cad7c993a5

    SHA256

    f98341349e70c2fe8a6199ea5f0594e5599b53a9a1b585f8c1c0ca97b1695fd3

    SHA512

    0354331d846659e30be8aed9f41a6ca07a242a0899454caaf85bfd10c47d4161298f4a67feddb29f6d5ba1584993f140126c89bdf5e0fdc5a54ba9f8f500730f

    Download Submit