Overview

overview

5

Static

static

5

375216c04a...18.pdf

windows7-x64

1

375216c04a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 02:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    375216c04ae193bdeaa5337307c2e10e_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    375216c04ae193bdeaa5337307c2e10e

  • SHA1

    62e397dc82bd21741c93402d6c94d4fa2edf9684

  • SHA256

    d75f2f85d0b3e6fcb6114693a90616dfe3c1686d0b0dd2444368add6aa3afcca

  • SHA512

    54ded3df785f24a7e894a8ecb69f8791f950903929042b809565f3c4d99ac057bb247e9f11bc89863b43cf21d1459b3b8eb192ede59f2a8014f000c2b6167a74

  • SSDEEP

    192:BUz4ULMxL1KtZys9+oOhU3nIG5mUq2bfjexHeo60dKJ0nsPW7eN0Yzu3stqsA:BUz4ULMxL1KtZyw+oOhU3n5DjGe/0dMe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\375216c04ae193bdeaa5337307c2e10e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1560961bab5c2a60bebe6908f8279bff

    SHA1

    1afb36b5dc2c40c1301c10d880dfc70f9e171fdd

    SHA256

    9d5add6b01e756b60c29453aeaea4afa5a707d633fb4407f51dc19b97646e54e

    SHA512

    47d88255d2cb6d55f6b1577aea6975f9bf2448b8da145ef0900106599f452b70a37f4792606dc517f8ff0ad4bf2a2f7e89cc851e3ed984df180e2770efdc9a08

    Download Submit

  • memory/2656-0-0x0000000003220000-0x0000000003296000-memory.dmp

    Filesize

    472KB

    Download