D:\TS4\_compile\Sims4\Releasex64\TS4_x64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eef70b2dca72d1b7f009bd9bc9eec2bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eef70b2dca72d1b7f009bd9bc9eec2bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eef70b2dca72d1b7f009bd9bc9eec2bf_JaffaCakes118
-
Size
29.8MB
-
MD5
eef70b2dca72d1b7f009bd9bc9eec2bf
-
SHA1
7ed4a55b1c6cc9c4746ce0af956e3297d7401228
-
SHA256
584193033c8190c1228746c8141afc3bd08440439fae1ee91b194522f235729c
-
SHA512
df099c44a50af2e3db4a53b5d1d5c30afe9d89a086e7df3fec9392d39b80431014188678867bde71c78b1bdd87572c315f066968a5005c71c2e174566883296a
-
SSDEEP
393216:P/2k8CTkAMMS/fRHU/Yk6j1wi1hi2tj+DQKo4H706m3Zy9KR24QAN:PuCTkpgm3Zj24QG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eef70b2dca72d1b7f009bd9bc9eec2bf_JaffaCakes118
Files
-
eef70b2dca72d1b7f009bd9bc9eec2bf_JaffaCakes118.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Exports
Exports
AmdPowerXpressRequestHighPerformance
DSS
NvOptimusEnablement
SetTelemetryTrampolineFunctions
Sections
.text Size: 21.2MB - Virtual size: 21.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 596KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ooa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lootbox Size: 4KB - Virtual size: 29.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE