Static task
static1
Behavioral task
behavioral1
Sample
twk-cuteftppro71.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
twk-cuteftppro71.exe
Resource
win10v2004-20240802-en
General
-
Target
c1c0c8aadb0efb313b6d91f10202ef7b_JaffaCakes118
-
Size
80KB
-
MD5
c1c0c8aadb0efb313b6d91f10202ef7b
-
SHA1
ec7292d5819227407d755217b66d1d9e85f3b3c6
-
SHA256
161e7d1f4d89f17d18298193dc7546fd6253760a6291df3751898704fd249bef
-
SHA512
c6f8cf25c0dd0927c110bdca4cda06da9c8220881e39fb1c1173bf4f0c11f92f7f8ad2c8a1fc3fe51a9c93ea4eb7c1551e2149fa4db3fc88b6ad962408e231f7
-
SSDEEP
1536:SUZuFu6wiKz9yPkUE8T4hR3fsQVdiA21SJevQ7jxYk/k8:9uFuBFYPRmh90QCcJevsg8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/twk-cuteftppro71.exe
Files
-
c1c0c8aadb0efb313b6d91f10202ef7b_JaffaCakes118.zip
-
file_id.diz
-
keygen.nfo
-
twk-cuteftppro71.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 79KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
twk.nfo