Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

e9d57b300d...18.doc

windows7-x64

3

e9d57b300d...18.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9d57b300d89f104f5eb5236e567f3c7_JaffaCakes118

  • Size

    1.3MB

  • MD5

    e9d57b300d89f104f5eb5236e567f3c7

  • SHA1

    2b1c2293354d6377f248a383b60e6a9cf8a58f9c

  • SHA256

    b1ad94102ee3a51ea6eb6357abc70076df8034dbbbcdc88eb2ab8a503c938ba2

  • SHA512

    3348c58ab7a28f714e4941a073ebde3fe7709157f58bf9cee1232eb5f9b9e99e2d42f13b30bacd70f352f04feb8820afe9ee63eab128317ee8bf44a389651533

  • SSDEEP

    24576:01aJapulktRe64z5GFqE6kaHrGik9wbDI9APsNMKl5K1YRhg:n4mNqB9

Score
8/10
macro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • e9d57b300d89f104f5eb5236e567f3c7_JaffaCakes118
    .doc windows office2003

    ThisDocument

    1
    Attribute VB_Name = "ThisDocument"
    2
    Attribute VB_Base = "1Normal.ThisDocument"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = True
    7
    Attribute VB_TemplateDerived = True
    8
    Attribute VB_Customizable = True
    9

    modAttach

    1
    Attribute VB_Name = "modAttach"
    2
    3
    Private Const STARTF_USESHOWWINDOW& = &H1
    4
    Private Const NORMAL_PRIORITY_CLASS = &H20&
    5
    Private Const INFINITE = -1&
    6
    7
    Private Type STARTUPINFO
    8
    cb As Long
    9
    lpReserved As String
    10
    lpDesktop As String

    myUserForm1

    1
    Attribute VB_Name = "myUserForm1"
    2
    Attribute VB_Base = "0{BE13D832-7D2D-48AE-8999-68AEB649D82C}{37700981-1A85-4FBB-BED8-22B3DC23352B}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm1

    1
    Attribute VB_Name = "UserForm1"
    2
    Attribute VB_Base = "0{355A8D07-FF4A-4BF3-B5D9-CC51F6382958}{81BE651B-3E80-432D-AB2E-6BEA2457C857}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm2

    1
    Attribute VB_Name = "UserForm2"
    2
    Attribute VB_Base = "0{91712340-6D13-4E61-A397-BE01139A3CE1}{3464397A-35E7-4ECF-9B94-EBB620235139}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm3

    1
    Attribute VB_Name = "UserForm3"
    2
    Attribute VB_Base = "0{9F4E256A-41AD-46BB-BE22-976605EB911D}{0A9230F9-AB2F-4F18-9A1C-C1DD21FAF6C5}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm4

    1
    Attribute VB_Name = "UserForm4"
    2
    Attribute VB_Base = "0{7E235E70-B0CE-4831-8280-6C0F96A9BE00}{2901F4D1-166D-4B79-9D8D-66BF80854BEB}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm5

    1
    Attribute VB_Name = "UserForm5"
    2
    Attribute VB_Base = "0{19EC77D6-1EB7-4DCE-98F7-85EC62315D67}{D804E231-61C8-4E16-8773-1C22718651BA}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm6

    1
    Attribute VB_Name = "UserForm6"
    2
    Attribute VB_Base = "0{6AFB810C-9EB2-4D64-A248-E53641481CDC}{8FB38915-2E04-47A2-8730-D1074475C581}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm7

    1
    Attribute VB_Name = "UserForm7"
    2
    Attribute VB_Base = "0{6463228E-1B69-4A82-9FF2-36EF8078F91B}{919C8E25-6F99-4644-913E-970C5CA3CCA3}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm8

    1
    Attribute VB_Name = "UserForm8"
    2
    Attribute VB_Base = "0{FC9270B5-531B-4ED3-A6E2-E7ED192C2B0E}{8845AEAA-5EBC-4746-8283-5A86425A1920}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm9

    1
    Attribute VB_Name = "UserForm9"
    2
    Attribute VB_Base = "0{628C9128-6F1A-4DF5-8304-25ED36F266F7}{97BEBDF9-8CF0-42E6-81AF-CF0AA1D04540}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm10

    1
    Attribute VB_Name = "UserForm10"
    2
    Attribute VB_Base = "0{AEDB48CC-6793-493E-AEBC-8DEA775AC63F}{C572EA8F-B7FE-4A96-95EF-59D7AA009BA6}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm11

    1
    Attribute VB_Name = "UserForm11"
    2
    Attribute VB_Base = "0{DF3D4BFA-94E5-4E2A-91EA-31872CC4EEEF}{3B170F64-63C3-4968-8DE5-D6FDE7AB9624}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm12

    1
    Attribute VB_Name = "UserForm12"
    2
    Attribute VB_Base = "0{F08054EF-C941-4C01-9F88-0CF8F9032109}{C491CE71-F6E8-47CB-97DF-CB43AB22C5ED}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm13

    1
    Attribute VB_Name = "UserForm13"
    2
    Attribute VB_Base = "0{4D5EAB53-168F-43EC-B55C-F9C8B8F14015}{8380A2F1-2A77-4162-BF03-4A8528478D1A}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

    UserForm14

    1
    Attribute VB_Name = "UserForm14"
    2
    Attribute VB_Base = "0{B1312674-EBA0-42EC-A34B-7EAE6155BAF8}{0911E61A-A19E-4711-AB5D-D3FE82BB5C53}"
    3
    Attribute VB_GlobalNameSpace = False
    4
    Attribute VB_Creatable = False
    5
    Attribute VB_PredeclaredId = True
    6
    Attribute VB_Exposed = False
    7
    Attribute VB_TemplateDerived = False
    8
    Attribute VB_Customizable = False
    9

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.