DllRegisterServer
DllUnregisterServer
onLogon
Overview
overview
5Static
static
3Anti-WPA-3...pa.dll
windows7-x64
5Anti-WPA-3...pa.dll
windows10-2004-x64
5Anti-WPA-3...A3.cmd
windows7-x64
1Anti-WPA-3...A3.cmd
windows10-2004-x64
1Anti-WPA-3...pa.dll
windows7-x64
1Anti-WPA-3...pa.dll
windows10-2004-x64
1Anti-WPA-3...pa.dll
windows7-x64
5Anti-WPA-3...pa.dll
windows10-2004-x64
5Static task
static1
Behavioral task
behavioral1
Sample
Anti-WPA-3-4-6/AMD64/antiwpa.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Anti-WPA-3-4-6/AMD64/antiwpa.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Anti-WPA-3-4-6/AntiWPA3.cmd
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Anti-WPA-3-4-6/AntiWPA3.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Anti-WPA-3-4-6/IA64/antiwpa.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Anti-WPA-3-4-6/IA64/antiwpa.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Anti-WPA-3-4-6/X86/antiwpa.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Anti-WPA-3-4-6/X86/antiwpa.dll
Resource
win10v2004-20240802-en
Target
f9edc4ef7fcd7c722ea990117aa2ab8d_JaffaCakes118
Size
19KB
MD5
f9edc4ef7fcd7c722ea990117aa2ab8d
SHA1
b5b9584839518e99ba7ade2ee974a168d30b780c
SHA256
f7c00eabd86e1ad0eed7a4ae0d46d122125d9d77f9bef0b04496bbeb633925b9
SHA512
bb7e6909f8cbfb83fcb0025a2625fc6d946c46636dcf88cf37a6819b980e8ec6b9313e31dba9f651a16df839fd91d72d064674d7835c281c8b82a2305f6ebd21
SSDEEP
384:AQ8LZ05VHF6tuGYoPIM/+/Zp/+Ul1n964D0foNm/+V6XB2NKVJu8k:AjLCfHQAGYoPV+KMn96Dfwm/+VMBoKVg
Checks for missing Authenticode signature.
resource |
---|
unpack001/Anti-WPA-3-4-6/AMD64/antiwpa.dll |
unpack001/Anti-WPA-3-4-6/X86/antiwpa.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
IsBadReadPtr
CopyFileA
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
GetForegroundWindow
MessageBoxA
GetSystemMetrics
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
PathStripPathA
ShellExecuteA
_vsnprintf
memset
_strcmpi
_stricmp
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
VirtualQuery
IsBadReadPtr
CopyFileA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
GetSystemMetrics
MessageBoxA
GetForegroundWindow
PathAddBackslashA
PathAppendA
PathStripPathA
PathRemoveFileSpecA
ShellExecuteA
_vsnprintf
_strcmpi
_stricmp
memset
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ