Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 13:19

General

  • Target

    0e39ce32a2de40edaefbf7442ae959a4_JaffaCakes118.pdf

  • Size

    102KB

  • MD5

    0e39ce32a2de40edaefbf7442ae959a4

  • SHA1

    504cf67795cef146b5ddd77d509bda39cf094483

  • SHA256

    311f118df4de42700d4a0e2e7c111af59d4b02ba334c58b258c96a404a6287b0

  • SHA512

    6f62ce21adbe9b90e120a3c0975f81e6f84d970171682eb03fbb75416aac3a947d809e41a6ba03a28a10e1379e2d6b9df440a33fa56117b18dc4a4d49a1ea0e7

  • SSDEEP

    1536:JCWfqZkkK4khVrvSNuCpMkmoxi0e2+g5rMXekQFZTdvHYN8l5W2KtSoLVaWcpOmu:kaZPUuIi12keThlKw+Vdmu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e39ce32a2de40edaefbf7442ae959a4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    388bde79496798d2f76c6c58a5ed8d60

    SHA1

    595aba504c24181ffdf982c32faa5ea5686f1553

    SHA256

    a12c89f5b33ba2d28fb88b2b7cb771629c1f8ae03e25050ce9b5a85d6624c213

    SHA512

    d8f5e61d276b41920540523f1fa698f3b156f2643f077cb494533810baa9f7192b85afac98538e3e42fda839d08e7f4054e1506a5d6ff2115c11078931bb22f1