55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118

General

Target
55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118
Size 787KB
Sample240518-tp7c4sca72
SHA256 7e15ae3b4ea92d200cbe0493b8c8a9a2daa4925a790fd870987acaa58b58f3a4
MD5 55a1fb469efa963549e59c7a0eff67f4
SHA1 0d6e042c881615a6889f0b03575be5b757f2915e
SHA512 86034981fdd4daa512b175a00340221aeb878ddd02fe7740d1b859eeb0d3fc424ab088087d596cce74630996b694d2ad46af93cbf18b10731cbf89ce388b55e3
SSDEEP 24576:FF3OOySsMzc98q9OxDA40AdIifvxkzMVegv0sTtlVj:FF3zyFD79sAdgFnxkcntvj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL DELIVERY NOTIFICATIONS_PDF.exe

File Explorer

55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118

.ace 787KB
out.ace

.ace 787KB
DHL DELIVERY NOTIFICATIONS_PDF.exe

.exe 1.2MB

55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118

SHA256 7e15ae3b4ea92d200cbe0493b8c8a9a2daa4925a790fd870987acaa58b58f3a4
MD5 55a1fb469efa963549e59c7a0eff67f4
SHA1 0d6e042c881615a6889f0b03575be5b757f2915e
SHA512 86034981fdd4daa512b175a00340221aeb878ddd02fe7740d1b859eeb0d3fc424ab088087d596cce74630996b694d2ad46af93cbf18b10731cbf89ce388b55e3
SSDEEP 24576:FF3OOySsMzc98q9OxDA40AdIifvxkzMVegv0sTtlVj:FF3zyFD79sAdgFnxkcntvj
MD5 SHA1 SHA512 SSDEEP

DHL DELIVERY NOTIFICATIONS_PDF.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 525fb87d7847f492ee968f742edba531d80ea6c877afe7e0b8e36a69203a1df3
MD5 db6402598c61afc744302ddee3709138
SHA1 19b9742924e8d6d648fb9a83cf51302a5558b4bb
SHA512 5e3085aef1725770ca24d484025dac7d0136b6c61f819a9a1bf794a4b76e2f405480e66a0ca416dee12ceb90ba481030ce0b3f83c6f07bd07e5e7224d6ac988d
SSDEEP 12288:FZGWfYACds2n3WLm7rT6mHgTBBEYKRCaavcf0C90ebshTd+doVDTniKmxCyWrDwT:LmPdsKPHwBDKnaC9kDifxEPXWxDCST
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1269770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118

out.ace

DHL DELIVERY NOTIFICATIONS_PDF.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

55a1fb469efa963549e59c7a0eff67f4_JaffaCakes118

out.ace

DHL DELIVERY NOTIFICATIONS_PDF.exe

mscoree

dotnet