Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 08:14
Behavioral task
behavioral1
Sample
15496c0d5cbb160e3afaecf3e6cba1f3_JaffaCakes118.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
15496c0d5cbb160e3afaecf3e6cba1f3_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
-
Target
15496c0d5cbb160e3afaecf3e6cba1f3_JaffaCakes118.pdf
-
Size
85KB
-
MD5
15496c0d5cbb160e3afaecf3e6cba1f3
-
SHA1
a26824ec16eccbca631a95c55125abad3196942d
-
SHA256
8871e272ddd4bc8c9171ed52eb912f9d20c99a8c2e59a1662c33f6d9e3f82505
-
SHA512
440d2fac981c152f9def195dbc6c519ce38b9f7c375a84c916129560b7c0eb41927da862372fbe35b30ca2bb693e184e0480f065ac86f88a84d05dd33ac07aea
-
SSDEEP
1536:J9UlVjRfzv0ZSvQ7V9BZc80dpTNDGjKExWapOtQHWqwmtH1149ZbUyei:QxzorK80Y5+tQXBtHEPUw
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15496c0d5cbb160e3afaecf3e6cba1f3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1692