Behavioral task
behavioral1
Sample
ad5155b07bad3b1326cecce84afcd1f2_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad5155b07bad3b1326cecce84afcd1f2_JaffaCakes118.doc
Resource
win10v2004-20240226-en
General
-
Target
ad5155b07bad3b1326cecce84afcd1f2_JaffaCakes118
-
Size
534KB
-
MD5
ad5155b07bad3b1326cecce84afcd1f2
-
SHA1
9cdb592b92cd5068697122a0896492c5528935d0
-
SHA256
41e2e1899e11c4e9efbd7042989a3e5a5960faf205fa181a7486d350a277cc6c
-
SHA512
bc2da878109ab02be53b3306b44448d1b910cf415142aed12236ce0df9709c6bbdd461a2273f17898035667ea40a5b24d375a04c19810c57c21a24abbe809ea1
-
SSDEEP
12288:5r8CmEKY7gpWMB1hoM6scG2u302l0HwbsG7kWunEDXm/zjH8BF:5r8CmEj6B1+MDn2u3049HSn+Xm/e
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
ad5155b07bad3b1326cecce84afcd1f2_JaffaCakes118.doc windows office2003
ThisDocument
Module1
Module3
Module123345
Module2