DllRegisterServer
DllUnregisterServer
onLogon
Static task
static1
Behavioral task
behavioral1
Sample
AMD64/antiwpa.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
AMD64/antiwpa.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
AntiWPA3.cmd
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
AntiWPA3.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
IA64/antiwpa.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
IA64/antiwpa.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
X86/antiwpa.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
X86/antiwpa.dll
Resource
win10v2004-20240802-en
Target
07a0f6ead1de6fd81f8b61e839001ad8_JaffaCakes118
Size
22KB
MD5
07a0f6ead1de6fd81f8b61e839001ad8
SHA1
342d0ab206f65b212996b868b5e9c25cd33cde56
SHA256
b416dd4254c4339c8d93e02edccdd7a16fa48bf91a323d6178152670bb2f8950
SHA512
175594ad6cad85b5af2bf32602ef27321da6d6fa777a0e1c58287116d34e1428aa67ed9219eb607fb7c4604890c08062b6c7a11765677c5f75c080d0e781dfb2
SSDEEP
384:VnlbU/LZ2EqSZBI6mAzIcyrmjm2z4Nqq+MU2QOdIvGJTy7ABxNV8ChHr1n25r665:VliLZq+I6miBjXz4f+6d1y7yeaHpn2+W
Checks for missing Authenticode signature.
resource |
---|
unpack001/AMD64/antiwpa.dll |
unpack001/X86/antiwpa.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
IsBadReadPtr
CopyFileA
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
GetForegroundWindow
MessageBoxA
GetSystemMetrics
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
PathStripPathA
ShellExecuteA
_vsnprintf
memset
_strcmpi
_stricmp
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetTickCount
GetSystemDirectoryA
FindFirstFileA
GetLastError
lstrcmpiA
GetModuleHandleA
FindClose
MoveFileA
GetModuleFileNameA
FindNextFileA
DeleteFileA
VirtualProtect
VirtualQuery
IsBadReadPtr
CopyFileA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
GetSystemMetrics
MessageBoxA
GetForegroundWindow
PathAddBackslashA
PathAppendA
PathStripPathA
PathRemoveFileSpecA
ShellExecuteA
_vsnprintf
_strcmpi
_stricmp
memset
DllRegisterServer
DllUnregisterServer
onLogon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ