Overview

overview

3

Static

static

3

182943c0cc...18.pdf

windows7-x64

1

182943c0cc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 00:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    182943c0cc038103de1c435ecdcacff6_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    182943c0cc038103de1c435ecdcacff6

  • SHA1

    e957d81e39b66cc92b68fbeb5e6140b7584282a8

  • SHA256

    7b2b0f58f4c2f79fd3873c2ee627c7f32bcb004a1f2c303b846a1787b3b59b1e

  • SHA512

    0119ee3cc2ffbbf4debd0b80cb23278b564057bdba659b6cf267e938360b4644311ef812ed53ed3f39980d178d8137ff004e880263940b60273171a7992004ff

  • SSDEEP

    1536:o1dVzBQ0rApuNg/nOKq7YkMAJ5bviBmzy9gvUZh3uSfz/Bz8esXn:WBQ0rApuFL7YkMivqqbsZheSfzBz8eA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\182943c0cc038103de1c435ecdcacff6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2c3be55514b72efa5a5ff7c42a9393b9

    SHA1

    7b81bf9039a709d8d029cbcf25da804c1de1c1c4

    SHA256

    03cfab1d509a9c5623cedc01642309517d5c21f8e37c123c4e6ff786e38d6be8

    SHA512

    89391a5293be5e8573cd6e63f23cf09707dc85aae6bb41bd08bc15b9063208a7bd5548ded6f77db42759dbd88a232efab48e05e4426bd5f339edbd01cde019c5

    Download Submit