GetFilterState
SetClientHwnd
SetFilter
SetFilterState
SetLoggingActi
SetTargetPid
Static task
static1
Behavioral task
behavioral1
Sample
WPE PRO.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
WPE PRO.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
WpeSpy.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
WpeSpy.dll
Resource
win10v2004-20240709-en
Target
76f77a4fd74775bc68b90d61cf015756_JaffaCakes118
Size
382KB
MD5
76f77a4fd74775bc68b90d61cf015756
SHA1
6f6c12c2a1dfb17d376a8779707433a1e3bb015d
SHA256
254fa77bf61a877821d460dd152914c8b6edef11bd279f493ef71f2f2a2f3bbc
SHA512
0c815ad2094cd4db6c424ee0acb4d62417197ec5e35a7a0f36b0c2e600ba191638a5a6255f96851eb58526d75b5864f6d60bc919fcdad44cc71a196da1d56d33
SSDEEP
6144:wVwblLj33nwjMjqAvb2WOFGnGzxzFSGqFQzsQheqW69lIv2lyIAaxL1hJU1H+vqb:iwblvJx2WOFKGzOtQz/jqEyuxhhInl
Checks for missing Authenticode signature.
resource |
---|
unpack001/WPE PRO.exe |
unpack001/WpeSpy.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
htons
gethostbyname
connect
send
inet_addr
socket
WSACleanup
WSAStartup
closesocket
GetFilterState
SetFilter
SetClientHwnd
SetTargetPid
SetLoggingActi
SetFilterState
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
LCMapStringA
VirtualProtectEx
InterlockedExchange
GetProcAddress
GetModuleHandleA
CloseHandle
OpenProcess
GetModuleFileNameA
FreeLibrary
VirtualFreeEx
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetACP
HeapSize
TerminateProcess
GetFileType
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
RtlUnwind
FindResourceExA
CopyFileA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SizeofResource
GetOEMCP
ReadProcessMemory
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
WriteProcessMemory
GetLastError
VirtualAllocEx
GetVersionExA
lstrlenA
GlobalReAlloc
GlobalUnlock
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
GetCurrentThread
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetProfileIntA
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SuspendThread
GlobalLock
SetThreadPriority
ResumeThread
lstrcpynA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetSystemDirectoryA
GetTickCount
GlobalHandle
GlobalFree
Sleep
SetEvent
CreateEventA
GlobalAlloc
MulDiv
GlobalSize
CharUpperA
GetAsyncKeyState
MapDialogRect
IsZoomed
SetParent
DeleteMenu
GetSystemMenu
ShowOwnedPopups
FindWindowA
GetDCEx
LockWindowUpdate
PostThreadMessageA
GetTabbedTextExtentA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
LoadStringA
GetMessageA
TranslateMessage
ValidateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetWindowDC
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
SetActiveWindow
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
wsprintfA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
EndDialog
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IsIconic
GetWindowPlacement
RegisterWindowMessageA
CallWindowProcA
SetWindowLongA
IsRectEmpty
EqualRect
GetDoubleClickTime
ShowScrollBar
IsChild
GetWindowTextA
SetFocus
PostQuitMessage
SetForegroundWindow
LoadIconA
GetDlgItem
PeekMessageA
BringWindowToTop
IsWindowVisible
EnumWindows
AppendMenuA
CreatePopupMenu
UpdateWindow
GetClassNameA
GetCaretPos
MessageBeep
RegisterClassA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
EmptyClipboard
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
CreateCaret
DragDetect
SetScrollPos
DestroyCaret
SetCaretPos
ShowCaret
EnableMenuItem
GetFocus
GetMessagePos
IsClipboardFormatAvailable
GetKeyState
IntersectRect
IsWindow
SetRect
DrawEdge
GetDC
ReleaseDC
GetClipCursor
ClipCursor
InvertRect
SetRectEmpty
GetClassInfoA
DefWindowProcA
GetSystemMetrics
GetCapture
RedrawWindow
LoadBitmapA
BeginPaint
EndPaint
PostMessageA
FillRect
LoadMenuA
GetIconInfo
DrawStateA
CopyRect
FrameRect
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
CreateDialogIndirectParamA
SetCursorPos
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadAcceleratorsA
GetMessageTime
DefMDIChildProcA
WindowFromPoint
GetActiveWindow
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
KillTimer
InflateRect
ReleaseCapture
PtInRect
OffsetRect
GetSysColorBrush
LoadImageA
LoadCursorA
RegisterClassExA
SetWindowRgn
DrawIconEx
DrawFrameControl
GetDesktopWindow
GetWindowRect
SystemParametersInfoA
SetTimer
GetCursorPos
ScreenToClient
SetCapture
EnableWindow
GrayStringA
DrawTextA
TabbedTextOutA
GetSysColor
InvalidateRect
GetClientRect
IsWindowUnicode
CharNextA
DefDlgProcA
ExcludeUpdateRgn
HideCaret
UnregisterClassA
GetWindow
GetTextExtentPoint32A
GetDeviceCaps
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
GetCharWidthA
SetBoundsRect
SetViewportOrgEx
GetViewportOrgEx
GetTextColor
PatBlt
CreateHalftonePalette
CreatePalette
GetDIBColorTable
RealizePalette
FillRgn
GetClipBox
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
GetCurrentObject
SetTextAlign
GetCurrentPositionEx
PolylineTo
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
SetRectRgn
CreateRectRgnIndirect
StretchDIBits
SetAbortProc
CreateDCA
CopyMetaFileA
EnumFontFamiliesExA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
SelectObject
DeleteObject
OffsetRgn
FrameRgn
CreateRoundRectRgn
CreateRectRgn
CombineRgn
GetStockObject
GetObjectA
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePolygonRgn
Rectangle
CreateFontA
GetTextMetricsA
CreateSolidBrush
CreatePen
Polygon
CreateCompatibleDC
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
GetTextExtentPointA
LineTo
CreateDIBitmap
BitBlt
GetFileTitleA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteExA
ShellExecuteA
ExtractIconA
ImageList_AddMasked
ord14
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_SetBkColor
ord17
ord13
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect
PropertySheetA
DestroyPropertySheetPage
ImageList_Draw
CreatePropertySheetPageA
ord8
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleGetClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
CoRegisterMessageFilter
RevokeDragDrop
CoRevokeClassObject
OleDuplicateData
OleInitialize
CoTaskMemAlloc
ReleaseStgMedium
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsFree
GetModuleHandleA
CreateThread
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
VirtualProtect
FlushInstructionCache
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
RegisterWindowMessageA
IsWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
SendMessageA
DestroyWindow
UnregisterClassA
RegisterClassA
MessageBoxA
CreateWindowExA
GetMessageA
ntohs
inet_addr
getpeername
getsockname
send
GetFilterState
SetClientHwnd
SetFilter
SetFilterState
SetLoggingActi
SetTargetPid
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ