?OptionalCircular@@YGHPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
DHL report.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DHL report.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_35949bb20a0a125dccd9e69c4e0ab940
-
Size
89KB
-
MD5
35949bb20a0a125dccd9e69c4e0ab940
-
SHA1
fadfdc390b9b5be3133d66d707a218fa0141fc9a
-
SHA256
000179205d442b89812015caed9a03c8607252ae5c8bceb4cb40e68e52379fd3
-
SHA512
1c7ea661de4742963dd1c6d4393fc7840a8aad239e4b5adc327c15e4c485d7fc9bd0b830d533ea4db20f524dab2a76dc3832f16eaa69bde21588b1a2bf52038d
-
SSDEEP
1536:tnYp2IGC1H8bAbbtJP1SyG8wNdCOTOCEmF:tnA2v9ita8wNd7OC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/DHL report.exe
Files
-
JaffaCakes118_35949bb20a0a125dccd9e69c4e0ab940.msg
-
http://www.dhl-usa.com/img/meta/dhl_logo.gif
-
-
DHL report.zip.zip
-
DHL report.exe.exe windows:5 windows x86 arch:x86
0b26a1316c7f4681b6cacc300287cf22
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shlwapi
PathIsPrefixW
msvcrt
atoi
kernel32
GetModuleHandleA
lstrlenA
LoadLibraryA
LoadLibraryExW
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE