jaffacakes118_26_Animierte_Themes_Nokia.exe
- SHA256 a032cfa3e5882a9a57ff78d515f2babef303f226a47bedd17dffe9e173a09571
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cc4 setup.scr
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc4 setup.scr
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target jaffacakes118_26_Animierte_Themes_Nokia.exe
- Size 1.1MB
- Sample260910-d33dbafa89
- SHA256 a032cfa3e5882a9a57ff78d515f2babef303f226a47bedd17dffe9e173a09571
- MD5 d619305f03fc5e5d8e90cf6441d9a0e2
- SHA1 5720565fe076fee89e01c85018f483825cf7dc4d
- SHA512 b24e5f0ca9604b3e10345b8a99411c378e2e56885bbad5fe18de163990b5975798f2c6c1866b4f9a587b9b3ca925140a3c08c237f8703462405338a287c7c976
- SSDEEP 24576:M4HTRMryzjUgzdMpxzr3of5fPBAUSZZG+6RS6rgEsWuNCPm:P9bhmpx/YBfpAPZc+6R5HsWuNCO
- TLSH T1313533CE9EB40120E4A79BB7342B28A7B6392D7296F7AD73C517002747124E3C75972A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cc4 setup.scr
File Explorer
-
jaffacakes118_26_Animierte_Themes_Nokia.exe.zip 1.1MB
-
T-Pain_-_Lolipop.mp3747KB
-
cc4 setup.scr.exe 435KB
T-Pain_-_Lolipop.mp3
- SHA256 5765b22e463899abc9b5d3ce62ebdb46efcb2d70a68dae473ea6582084cda21c
- MD5 7d165f5250550da0089eb9e02e83d640
- SHA1 b59defd4912bc6980dd3501ab8ac942352fdea3d
- SHA512 50e02e4fc092335e76fc0a23faf0cf964f562458a3d34eaf8fe2da8b23a05021df81b6f6b8dadce632f453c36848d0ac76966487a093cb592718873383ee4237
- SSDEEP 12288:sZ+zpLe6lQPsCwAffsxHUIqAXwtPGkSGlcutHONcHeN7zVv9ej6lEGhyvs3XhzPn:ZdSGQPsCncmaudhHAJ9eGlryUnp377
- TLSH T1D6F42372ED9D0D3DDFB53E3A323984BFCB3368478A678C9108481E6125A9C985DB2DD1
- MD5 SHA1 SHA512 SSDEEP TLSH
cc4 setup.scr
- IMPHASH 428aeda0f2b8c45cd109d4f6a9292044
- SHA256 d8a869eedb39333b7bb03574421494111a8648fe2e9805509fa1497385fbeee9
- MD5 a48016bf92fc6ea34566abfe046d52b3
- SHA1 53976ad759c82b0e83dfe164070e9f9744ec5b30
- SHA512 e97bc9fd023d1b037c1357ab32938a6f87223cb1184dc25dda8dcdace6f2e63768796e371a044901d04373c1be72cc67ffd3ca471fad7670a390410c47084eb6
- SSDEEP 6144:LMyX3qAcSD3Dty9ZCOfVavfqfS5cNIdVQXcNPUgzdPOKg2mUHClWq9dyf:LjqhSDTtyu2Ivz5cN8zpUgzdSpP9dyf
- TLSH T196941211F560CC32E41100B758BAA2C9AB6AEC715B52C5D3B7CF365FDA7D3D05A3A20A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetCurrentProcess
lstrcatA
lstrcpyA
Sleep
FreeLibrary
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetModuleFileNameA
GetPrivateProfileStringA
CreateMutexA
GetFileSize
SetCurrentDirectoryA
LocalAlloc
GetSystemDirectoryA
ExitProcess
lstrcmpA
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
GetLastError
GetProcAddress
ReadFile
lstrlenA
DeleteFileA
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
wsprintfA
advapi32
RegOpenKeyExA
GetUserNameA
RegCloseKey
shell32
SHGetFolderPathA
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.googleo
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
340KB
Virtual Size
339KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=106, id=1, productName=Unmarked objects,
count=48, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,