34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118

General

Target
34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118
Size 1.5MB
Sample240710-lqqsrasfle
SHA256 7bcf8bade2c9b7b016d8ea048b5f9cc7e2e7d55752c013892dc8b8b3fd56c975
MD5 34349b88a51467d3e8ad8dc4e8c47613
SHA1 0127ff8bfd86dda975176c81b176a3579ad3b5fb
SHA512 846d297e56f2d0e8ddc8d4da82cf874a15e06557ce01d3b24727a0d2c28c92a5630e29467a692da00519cba731d37df4a4da1105666e35014b29e8e6fb655d94
SSDEEP 12288:Ag+7IhD+7v1MLfIhmC1jQp16V2dUkj0Rgh1UYWntHaD9VO84GkKHmhz5Z7:AgPhD+AIhmC18ldVj06SYpxVODF7Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL_FORM_16022021.exe

File Explorer

34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118

.iso 1.5MB
out.iso

.iso 1.5MB
DHL_FORM_16022021.exe

.exe 957KB

34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118

SHA256 7bcf8bade2c9b7b016d8ea048b5f9cc7e2e7d55752c013892dc8b8b3fd56c975
MD5 34349b88a51467d3e8ad8dc4e8c47613
SHA1 0127ff8bfd86dda975176c81b176a3579ad3b5fb
SHA512 846d297e56f2d0e8ddc8d4da82cf874a15e06557ce01d3b24727a0d2c28c92a5630e29467a692da00519cba731d37df4a4da1105666e35014b29e8e6fb655d94
SSDEEP 12288:Ag+7IhD+7v1MLfIhmC1jQp16V2dUkj0Rgh1UYWntHaD9VO84GkKHmhz5Z7:AgPhD+AIhmC18ldVj06SYpxVODF7Z
MD5 SHA1 SHA512 SSDEEP

DHL_FORM_16022021.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 072b5e15bd74b972d408910263e80c07cb6b4f17d3eb6024508b457f7dd84e87
MD5 e906fa26bdbd8f4dfd848c86c59b5662
SHA1 11633695c7db5dca2ee79d13d66a0d38e0c93e48
SHA512 4e0d0108ad724d119a729994dd2402139c32e5e1e8c4236150f568b7d978bae8a2d4a532bf8fb669dcfe2d26f52719f1f12dcb3922c5a95beab75e16f44f1fb1
SSDEEP 12288:/g+7IhD+7v1MLfIhmC1jQp16V2dUkj0Rgh1UYWntHaD9VO84GkKHmhz5Z7:/gPhD+AIhmC18ldVj06SYpxVODF7Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

807438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118

out.iso

DHL_FORM_16022021.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

34349b88a51467d3e8ad8dc4e8c47613_JaffaCakes118

out.iso

DHL_FORM_16022021.exe

mscoree

dotnet