Static task
static1
Behavioral task
behavioral1
Sample
iRRM_TES4_Trainer.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
iRRM_TES4_Trainer.exe
Resource
win10v2004-20241007-en
General
-
Target
2749aa764d6efdf0dd009d1784f5e08c_JaffaCakes118
-
Size
95KB
-
MD5
2749aa764d6efdf0dd009d1784f5e08c
-
SHA1
eacfa774b3bc48b2811e7c4e6412c640da499931
-
SHA256
addc9f9cee2cfd0a51682d908427be2c2487935fd8aceb34a2f6d66ad063c947
-
SHA512
54ce8e9ba1a88ea9a3652f2cd65a5ae8eb3449b639731e3f3e2316eefb4f5db37a5e431c30fca7b6e2d5bcb2566e8b32deb79550a76f9e838d99e085edfb6956
-
SSDEEP
1536:4OHOL/Pp0UJKfv38H4XSBnllwfLWY6b8qL6tkvnT/mjjjvYmDF6ymdVRyWLyljxj:4OHO1JK0ISBllwTv/gMXv/iZwUVm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/iRRM_TES4_Trainer.exe
Files
-
2749aa764d6efdf0dd009d1784f5e08c_JaffaCakes118.rar
-
iRRM_TES4_Trainer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 95KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE