QvodNet_Clear
QvodNet_CreateHttpTask
QvodNet_CreateP2PTask
QvodNet_Init
QvodNet_PauseTask
QvodNet_QueryTask
QvodNet_RemoveTask
QvodNet_SetSpeed
QvodNet_StartTask
Static task
static1
Behavioral task
behavioral1
Sample
db8221cce6a9f0822a6003a54b8d88ef_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db8221cce6a9f0822a6003a54b8d88ef_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db8221cce6a9f0822a6003a54b8d88ef_JaffaCakes118
Size
260KB
MD5
db8221cce6a9f0822a6003a54b8d88ef
SHA1
2ea3aa3d1208f89c946af2b0fb711fba7dd878c8
SHA256
5892efa07f6ed8d72c42de560b8b009128580e1e5729430f0eb442096ff8b92b
SHA512
26fd36c9dde8da232d8c652aa66ad382d932df5a9cbd4ddde655e00fba7aac0e1dd01f0c0c61f7531cb2350bb95fc681d6e71f73d1420f105a5e4e21b220caa2
SSDEEP
3072:15+QXlAoUPf5B+CnlRcCZoBvqyUJPZG+XOphER+Glg9EtuQgZv6eoWJFwk4Ir:9CoWWCnlRcCICyUy+SKQGwEtuikN
Checks for missing Authenticode signature.
resource |
---|
db8221cce6a9f0822a6003a54b8d88ef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetTickCount
LocalFree
LocalAlloc
GetSystemDirectoryA
GetVersionExA
GetTempPathW
GetModuleFileNameA
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
SetEvent
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
InterlockedExchange
WideCharToMultiByte
GetCommandLineA
GetVersion
GetLastError
DeleteFileW
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
ExitProcess
TerminateProcess
GetCurrentProcess
ReadFile
GetFileType
CreateFileW
MoveFileW
CreateDirectoryW
RaiseException
GetSystemTimeAsFileTime
FlushFileBuffers
WriteFile
SetFilePointer
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
SetStdHandle
SetEndOfFile
SetUnhandledExceptionFilter
GetProcAddress
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
CreateFileA
GetLocaleInfoW
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
SysStringLen
gethostbyname
gethostname
WSAStartup
htons
inet_addr
sendto
htonl
setsockopt
bind
socket
closesocket
ntohs
select
connect
ntohl
recv
WSAGetLastError
recvfrom
WSACloseEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
WSACreateEvent
ioctlsocket
inet_ntoa
listen
accept
__WSAFDIsSet
send
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
GetAdaptersInfo
QvodNet_Clear
QvodNet_CreateHttpTask
QvodNet_CreateP2PTask
QvodNet_Init
QvodNet_PauseTask
QvodNet_QueryTask
QvodNet_RemoveTask
QvodNet_SetSpeed
QvodNet_StartTask
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ