Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 04:44

General

  • Target

    403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    403ef4e6c94498b2f6df7bcd1240f9e8

  • SHA1

    ba3cf4b58a5d0ace5836e04afe019201b5eb9384

  • SHA256

    1affbacf00b6a9d9dc3ed25969358c412cd9ab4c18bd9bc46eb4fd33064a5a99

  • SHA512

    a647513a603541f23d29215add851c17c778a1022b8e166ddba6395326cd8264652f1cb86921657d0e9b0ef63a0df0fc0b87b72869f90d8de3f540adbc49c741

  • SSDEEP

    192:CPz4ULMxLIKXHsfyxfT2cVeTDXUflI7apqhlBT95elOif7lRXpvgptLx3sdTXSxA:CPz4ULMxLIKXHsfCneTbUfYa6T0Oc5R9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\403ef4e6c94498b2f6df7bcd1240f9e8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    84c0846da46f701cf7a4612fdd4e3fd6

    SHA1

    b7345806335ec40bc1bbf3b2ac33a0fc72139f39

    SHA256

    451761b4572a76a31763b8574f09307ba9da03e6b44e12e0d0ce9d86f083e968

    SHA512

    596ee76fc737838d5db83e025e45f933a9aaf24721ccae0438db275373ac5c871c4b5c49bb0da1810207e947f0700253c16541e8903ee83cd62df1441ca40428

  • memory/1724-0-0x0000000005340000-0x00000000053B6000-memory.dmp

    Filesize

    472KB