General

  • Target

    0049b8ba0d02da36afa32d5836e4f82d_JaffaCakes118

  • Size

    132KB

  • MD5

    0049b8ba0d02da36afa32d5836e4f82d

  • SHA1

    1782a1923ef9793b54d60aa94538915144b3a725

  • SHA256

    ba680be219ad90d4d3318552bae2b145ded44d8d032681ff09e7461ec9fe5fcc

  • SHA512

    01a8dd8d157bbfdcaaa641e4ad2884e86e5e1f6e939565b4b6a4d22e90ac9dbf75adb0a6295140706af650ae515d40bdb060c89c3718c9e24d03c0c356310632

  • SSDEEP

    3072:gD+gD9N9s1G1Ug7gCV6tvL3hEht1PDYDqymPPnxerH43Kvq5pYKpM:+l9s1dgs1L3hOtaDQArY3KvgW3

Malware Config

Signatures

  • Office macro that triggers on suspicious action 3 IoCs

    Office document macro which triggers in special circumstances - often malicious.

Files

  • 0049b8ba0d02da36afa32d5836e4f82d_JaffaCakes118
    .zip
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/1-ڵʮղѧƼ걨֪ͨ.doc
    .doc windows office2003
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/2-2016ղרѡ֪ͨ.doc
    .doc windows office2003
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/3-ղѧ취.docx
    .docx office2007
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/4-Ͻͨѧղר취.doc
    .doc windows office2003
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/5-ʮղѧѡƼ.docx
    .docx office2007
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/6-ʮղѧѡ.docx
    .docx office2007
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/7-2016Ͻͨѧղר߼.docx
    .docx office2007
  • ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ.docx
    .docx office2007