Overview

overview

3

Static

static

3

4df327bc18...18.pdf

windows7-x64

1

4df327bc18...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    96s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 10:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4df327bc184dc8ec22f259d8f483d7a8_JaffaCakes118.pdf

  • Size

    510KB

  • MD5

    4df327bc184dc8ec22f259d8f483d7a8

  • SHA1

    d53699016c7e917333d47b1c4e04e0633e6fedea

  • SHA256

    3048fb113894a22bb862eda85afc839e85679e2cadc6336b16503dfeae9b29ec

  • SHA512

    1dd04db7eb04115d57490b9f0178c022da3c2be4a188a59d2f46a5bad8c45c4583936dff66b8e248fbc4850c4cd13d683f16c227d658112bfcc1f949aff74dd4

  • SSDEEP

    12288:tm2639M8Ik+qgSQK0a8ndVz9BXeTS+qwf2c6tdzhH3RX:tS3Gz1SQR/LeTewfpaZV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4df327bc184dc8ec22f259d8f483d7a8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    590f0a71c02edd95cfe1731faa1c3788

    SHA1

    13bfbc4c226d203c18aa899713c5cecd242cec58

    SHA256

    f3a201486c0871435f483f95e240d124a2c56174c367fff83ff13fef77d4d7d7

    SHA512

    fbcade12c9fdcdd53b87b258bfc22dddffb9bb92f695c6660295f6ca2e5443252775444477d921b1df442649266edba32516a950e3b510def4120faf39761ed3

    Download Submit