Static task
static1
Behavioral task
behavioral1
Sample
DHLDELIVERYNOTIFICATIONPDF.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
DHLDELIVERYNOTIFICATIONPDF.exe
Resource
win10v2004-20240802-en
General
-
Target
cde8f4724ff63b6bbce1276f802dc086_JaffaCakes118
-
Size
326KB
-
MD5
cde8f4724ff63b6bbce1276f802dc086
-
SHA1
367baa4718a4a67f4f4db886dd44b0f3455baf61
-
SHA256
5b76e1cf59147f6b4c390dae52a7c3564940fdd3d169a25336a616057c7e5711
-
SHA512
5454ae9144ad5f9bdb1f743d9f2b75ddd234f16aa4339344ad7e99947d010d918d019f06e37ab501af4f49dc71a1723f81bb6f6466d839385a9985cfb0e31675
-
SSDEEP
6144:4TMdFc8MlldY3QWalREeD4yyfIVtAvH+V71lGVwykXCLGNVfNDs8UuD7QGTI:4h84Y3QWex4yygVtWedG6yknVfNDs8lk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHLDELIVERYNOTIFICATIONPDF.exe
Files
-
cde8f4724ff63b6bbce1276f802dc086_JaffaCakes118.rar
-
DHLDELIVERYNOTIFICATIONPDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 522KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ