Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
04-07-2024 18:47
Behavioral task
behavioral1
Sample
25db5ee0eaeb50f41ccf1d25360d7508_JaffaCakes118.pdf
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
25db5ee0eaeb50f41ccf1d25360d7508_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
25db5ee0eaeb50f41ccf1d25360d7508_JaffaCakes118.pdf
-
Size
84KB
-
MD5
25db5ee0eaeb50f41ccf1d25360d7508
-
SHA1
3f0ca4c868fb973bf94dabbc6c38781cb0370188
-
SHA256
217b0eefede31246ca76db3ef6b1018f59af1f79367d0e000ddf447ce1e375b6
-
SHA512
2b603482d9da4eeaa3ea38176c88d6f02a243aad286546017d53782d70231ed673f1065bc7b758951f40538a1d7ade571d2149d93be23d763ad04c3778e655e7
-
SSDEEP
1536:8m80dD/19e5PXW6bWASiC2wijkzUHpsMVbkWGpOKHwxe0WGWQ7VVKXQLIXAtN:k+IPmsSiC7i5HpVbpKHGe2V0Xa
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2016 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2016 AcroRd32.exe 2016 AcroRd32.exe 2016 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25db5ee0eaeb50f41ccf1d25360d7508_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2016