0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118

General

Target
0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118
Size 659KB
Sample240622-2p1vbssbrn
SHA256 3e99167a7a136a15241f1e89ffcf223f09696b8f32df56d02b17d789ec150e1e
MD5 0438dfb1ada915db75799f6ca06bcec2
SHA1 bb1716c033f958c2b453a950d05c17c09b4b0c12
SHA512 77c1f197cc81eafe9b5bb560eac9b554e1749a4ff7a408595da174f6a751867c652ca98ab17e09281801cc482a908e60f3aba5ead453aa6a5a8fd6e174612bf3
SSDEEP 12288:W1s1ipBDk4q0XBDjBS6Qnpa7oqcVma+BMhdeb0FhzgDKn:AsipZu0RfBS6QnscVmaGUoqgDe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL_FORM_00099271654_P.exe

File Explorer

0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118

.rar 659KB
DHL_FORM_00099271654_P.exe

.exe 1.3MB

0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118

SHA256 3e99167a7a136a15241f1e89ffcf223f09696b8f32df56d02b17d789ec150e1e
MD5 0438dfb1ada915db75799f6ca06bcec2
SHA1 bb1716c033f958c2b453a950d05c17c09b4b0c12
SHA512 77c1f197cc81eafe9b5bb560eac9b554e1749a4ff7a408595da174f6a751867c652ca98ab17e09281801cc482a908e60f3aba5ead453aa6a5a8fd6e174612bf3
SSDEEP 12288:W1s1ipBDk4q0XBDjBS6Qnpa7oqcVma+BMhdeb0FhzgDKn:AsipZu0RfBS6QnscVmaGUoqgDe
MD5 SHA1 SHA512 SSDEEP

DHL_FORM_00099271654_P.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5c7a8d747c0858343c409b41d793ed9409bd16d0f730891b7a2ec7feb5cd4395
MD5 7cb90a6bdb53e506818e5b4cffc27f6d
SHA1 7343a035ae2578edab52641de081cfd152464f67
SHA512 cde083ce38be7c18377ca302347194233acc073418406f0cda4fe9d3915f732cafef6f39cc238e13aebc103ed287d1e54c4366845e5343db2ba01aa77683166e
SSDEEP 12288:rhGT/f7DSvWN1JuigLYVlaf+dhKeVnVBAzz8MDzAK/3LhHWUJ+eBlsi7ZZHET6:4zHSvi7AYaf+dk+gzIK/3lV6iu6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1151646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118

DHL_FORM_00099271654_P.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0438dfb1ada915db75799f6ca06bcec2_JaffaCakes118

DHL_FORM_00099271654_P.exe

mscoree

dotnet