DeCrypt
EnCrypt
Static task
static1
Behavioral task
behavioral1
Sample
AntiWPA_Crypt.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
AntiWPA_Crypt.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
WPA_Kill.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
WPA_Kill.exe
Resource
win10v2004-20240802-en
Target
eb12c3d02a2744f2cb0615bdad8e0931_JaffaCakes118
Size
56KB
MD5
eb12c3d02a2744f2cb0615bdad8e0931
SHA1
424dd42ef48720762f1cea89659a9343907bf461
SHA256
43f05ac8ce69b307777ebaa185ab9499891ef0d760eb15e8cd2f0f4e2c943170
SHA512
f0a3a0b612066155de4830b6e15b48c748b8b757e2d8df3955e159ee5522d408a0fd0c4a137d57ba9e1e2e8f54e87239a75d7e4222a6c2ce47a9a679d3dd2f83
SSDEEP
1536:nlUzi3W3JJZCXIwwfwvGrzpWQ9ZcGwxfBu9dZX:nGzi3GsIwn6d7efBQX
Checks for missing Authenticode signature.
resource |
---|
unpack001/AntiWPA_Crypt.dll |
unpack001/WPA_Kill.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeCrypt
EnCrypt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
MethCallEngine
ord516
ord660
ord668
ord592
ord300
ord301
ord595
ord303
ord598
ord306
ord307
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord607
ord530
ord608
ord317
ord318
ord533
ProcCallEngine
ord537
ord647
ord648
ord573
ord681
ord576
ord578
ord685
ord100
ord579
ord616
ord617
ord619
ord580
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ