3ef25edc1be15d64c95fcc0890f874ea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3ef25edc1be15d64c95fcc0890f874ea_JaffaCakes118
Size

242KB
MD5

3ef25edc1be15d64c95fcc0890f874ea
SHA1

952d38d2a4c60710352f4d005e7f63da3cf58cc3
SHA256

5d8d0544c179c20b917ecdc896517e77face8bfa11d1710e043d8cd5bd9e06a4
SHA512

ed9fea8dfe8681c6c06e9b43547c4924d6f1c8bf817412d7ace0436872ba98894d4510de91244ba23687d0f10703c7be748a517006dbd4b79aaaaca8d94b2a99
SSDEEP

6144:UfCbV3wtx31q9iR8SHHn925cYQTquTI6Dd8Dj:YCbaDcIiS9iOqutDd4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FreeNote/FreeNote/FreeNote.exe

Files

3ef25edc1be15d64c95fcc0890f874ea_JaffaCakes118
.rar
FreeNote/FreeNote/FLASH动画频道欣赏.url
.url
FreeNote/FreeNote/FreeNote.exe
.exe windows:4 windows x86 arch:x86

a50a2a7238b5c790368c043827cfc288

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetSystemInfo
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
InterlockedDecrement
SetLastError
GlobalFree
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetProcAddress
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
CloseHandle
CreateMutexA
GetLastError
GlobalLock
GlobalUnlock
GetPrivateProfileSectionNamesA
WritePrivateProfileSectionA
lstrlenA
WritePrivateProfileStringA
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
FindClose
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetEnvironmentStrings
InterlockedExchange

user32

GetMessageA
TranslateMessage
ValidateRect
WindowFromPoint
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
EnableMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuStringA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
IsWindowVisible
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowPos
IntersectRect
IsIconic
GetWindowPlacement
GetWindow
GetSysColorBrush
RegisterClassExA
KillTimer
GetDC
LoadBitmapA
GetMenuState
GetMenuItemCount
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
GetMenuItemID
LoadIconA
ClientToScreen
SetWindowRgn
GetSubMenu
UnregisterClassA
GetClipboardData
CloseClipboard
GetCursorPos
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
GetDesktopWindow
SetTimer
BringWindowToTop
PostMessageA
LoadMenuA
ModifyMenuA
SetWindowLongA
SetCursor
LoadCursorA
UpdateWindow
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
SetMenu
TranslateAcceleratorA
ShowOwnedPopups
wsprintfA
MessageBoxA
LoadImageA
IsClipboardFormatAvailable
GetTabbedTextExtentA
ReleaseDC
GetWindowDC
InsertMenuA
CheckMenuItem
CreatePopupMenu
FillRect
MessageBeep
PostQuitMessage
DestroyMenu
GetKeyState
GetMenuItemInfoA
GetMessagePos
ReleaseCapture
SystemParametersInfoA
SetCapture
GetCapture
InvalidateRect
GetClientRect
PtInRect
GetSysColor
GetSystemMetrics
IsWindow
EnableWindow
GetParent
RedrawWindow
GetWindowRect
SendMessageA
DrawFocusRect
DrawFrameControl
DrawEdge
OffsetRect
InflateRect
SetRect
CopyRect

gdi32

DeleteDC
CreatePatternBrush
CreateBitmap
SelectPalette
DPtoLP
CreateCompatibleBitmap
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Rectangle
SetTextColor
GetClipBox
CreateRectRgn
CombineRgn
DeleteObject
GetPixel
BitBlt
CreateCompatibleDC
CreatePolygonRgn
EnumFontsA
GetStockObject
GetBkColor
SelectObject
GetObjectA
CreateFontA
CreateSolidBrush
GetTextExtentPoint32A
RealizePalette
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreatePen

comdlg32

ChooseColorA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey
RegCreateKeyA

shell32

ShellExecuteA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA

comctl32

ImageList_Draw
ord17
ImageList_Destroy
ImageList_LoadImageA
ImageList_GetImageInfo

shlwapi

PathFindFileNameA
PathFindExtensionA

ole32

CoCreateInstance

oleaut32

VariantClear
VariantChangeType
VariantInit

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 704KB - Virtual size: 701KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FreeNote/FreeNote/History.txt
FreeNote/FreeNote/License.txt
FreeNote/FreeNote/build.ini
FreeNote/FreeNote/bundlic.txt
FreeNote/FreeNote/english.lang
FreeNote/FreeNote/images/ap-search-go-btn.gif
.gif
FreeNote/FreeNote/images/ap-search-logo-126x32.gif
.gif
FreeNote/FreeNote/images/apppopup.gif
.gif
FreeNote/FreeNote/images/fn_shot1.gif
.gif
FreeNote/FreeNote/images/mgsheader.jpg
.jpg
FreeNote/FreeNote/images/movenote.gif
.gif
FreeNote/FreeNote/images/notepopup.gif
.gif
FreeNote/FreeNote/images/notesettings.gif
.gif
FreeNote/FreeNote/images/options.gif
.gif
FreeNote/FreeNote/images/taskbar1.gif
.gif
FreeNote/FreeNote/mgsstyle.css
FreeNote/FreeNote/s_chinese.lang
FreeNote/FreeNote/必看说明.htm
FreeNote/FreeNote/技术文章中心.url
.url
FreeNote/FreeNote/最多绿色软件的地方－－河源下载站.url.url
.url
FreeNote/FreeNote/河源下载站.url
.url
FreeNote/FreeNote/河源下载站Cngr.cn说明.txt

Sharing

General

Malware Config

Signatures

Files

a50a2a7238b5c790368c043827cfc288

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

Sections

.text Size: 180KB - Virtual size: 177KB

.rdata Size: 52KB - Virtual size: 49KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 704KB - Virtual size: 701KB

.text
Size: 180KB - Virtual size: 177KB

.rdata
Size: 52KB - Virtual size: 49KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 704KB - Virtual size: 701KB