d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118

General

Target
d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118
Size 643KB
Sample240907-v14l2avgrm
SHA256 44e849db1720b5792bd5fdaaa836febe70b46f16dd3bc34575a1dfa5c9cb76bc
MD5 d277575c37a75e86f9ab5e550e11cbf8
SHA1 57d3942e83d1a19fe0613317ba7ce5fbedbdd9e6
SHA512 4184cb7701499970e2f5723a6e9dfc6526afc88d9bea16400618fb1456d1edc7e2b51d9506920950efd706d98685ba5e2b4b91080dc478e83b9d4d6b8a66e833
SSDEEP 12288:CkSOJDXgHVYgQLKnO+p+4tM/szeGlnF3RP3c3yHVvfVd7w8sdCokqKTxojNSCNk:CkSsoRvnzi4LfcC1f7739qE6jNvNk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dhl Contact Form.exe

File Explorer

d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118

.gz 643KB
Dhl Contact Form.exe

.exe 727KB

d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118

SHA256 44e849db1720b5792bd5fdaaa836febe70b46f16dd3bc34575a1dfa5c9cb76bc
MD5 d277575c37a75e86f9ab5e550e11cbf8
SHA1 57d3942e83d1a19fe0613317ba7ce5fbedbdd9e6
SHA512 4184cb7701499970e2f5723a6e9dfc6526afc88d9bea16400618fb1456d1edc7e2b51d9506920950efd706d98685ba5e2b4b91080dc478e83b9d4d6b8a66e833
SSDEEP 12288:CkSOJDXgHVYgQLKnO+p+4tM/szeGlnF3RP3c3yHVvfVd7w8sdCokqKTxojNSCNk:CkSsoRvnzi4LfcC1f7739qE6jNvNk
MD5 SHA1 SHA512 SSDEEP

Dhl Contact Form.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a8e3aa38bc5411b933613c703086a892234231639204d40df93831d6062423c7
MD5 fcad5da5a6979b13f69461436c7d70d3
SHA1 b2cbe7e8642e234d541c3734f328375b0473f6f3
SHA512 42ad6ed4d26fd49255b497d20176c74c6d55520f1265cfd2c7bf1f1f46741be92be148d4402e3e3990e8f27a4996fa47da20c61f5fff94f3cd000589ccc125d2
SSDEEP 12288:x3QrPihTKSNDJkJVYMiLmnA+p+4BM/EzOU3nFtdPZcryfNvf5z76msfyaEyobpoa:xdTKEoh/nlOgthceFfl75xyESTNbQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

747038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118

Dhl Contact Form.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

d277575c37a75e86f9ab5e550e11cbf8_JaffaCakes118

Dhl Contact Form.exe

mscoree

dotnet