Static task
static1
Behavioral task
behavioral1
Sample
thaiphoon-burner-dlya-windows/install_thaiphoon_burner_ru.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
thaiphoon-burner-dlya-windows/install_thaiphoon_burner_ru.exe
Resource
win10v2004-20240709-en
General
-
Target
76681667a7c84154e3b8b410cfe1594b_JaffaCakes118
-
Size
934KB
-
MD5
76681667a7c84154e3b8b410cfe1594b
-
SHA1
2dde1aa3e036a2b15ea63e686eed7dbc8a28fdb9
-
SHA256
f68d94d140bd3a2f623b9c9f4bf5dd0a75a38407a0639ce3808ee9656e52aeaa
-
SHA512
5a51a26351e355304d68c9638c7d477a857c4babdbb661813eb8c14bbd4bf6714262d153cac78977fe65b7fc2983f85cce4d30d4607597e06bf221137a0053b4
-
SSDEEP
24576:igVNAbliIRJxXTeuuwOO/LjppiAcd5l2z5gdivo3:rVNAxXTeuq2X6cM2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/thaiphoon-burner-dlya-windows/install_thaiphoon_burner_ru.exe
Files
-
76681667a7c84154e3b8b410cfe1594b_JaffaCakes118.zip
-
thaiphoon-burner-dlya-windows/install_thaiphoon_burner_ru.exe.exe windows:4 windows x86 arch:x86
c23eb2c966d3b73c14707e4f0a7ca10e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
comdlg32
ChooseColorA
libeay32
ERR_load_RSA_strings
Sections
CODE Size: 827KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE