Overview
overview
8Static
static
8�...��.doc
windows7-x64
4�...��.doc
windows10-2004-x64
1�...��.doc
windows7-x64
4�...��.doc
windows10-2004-x64
1�...�.docx
windows7-x64
4�...�.docx
windows10-2004-x64
1�...��.doc
windows7-x64
4�...��.doc
windows10-2004-x64
1�...�.docx
windows7-x64
4�...�.docx
windows10-2004-x64
1�...�.docx
windows7-x64
4�...�.docx
windows10-2004-x64
1�...�.docx
windows7-x64
4�...�.docx
windows10-2004-x64
1�...�.docx
windows7-x64
4�...�.docx
windows10-2004-x64
1Behavioral task
behavioral1
Sample
ڵʮղѧ2016�.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ڵʮղѧ2016�.doc
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
ڵʮղѧ2016�.doc
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
ڵʮղѧ2016�.doc
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
ڵʮղѧ2016�.docx
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
ڵʮղѧ2016�.docx
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
ڵʮղѧ2016�.doc
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
ڵʮղѧ2016�.doc
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
ڵʮղѧ2016�.docx
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
ڵʮղѧ2016�.docx
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
ڵʮղѧ2016�.docx
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
ڵʮղѧ2016�.docx
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
ڵʮղѧ2016�.docx
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
ڵʮղѧ2016�.docx
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
ڵʮղѧ2016�.docx
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
ڵʮղѧ2016�.docx
Resource
win10v2004-20240412-en
General
-
Target
0049b8ba0d02da36afa32d5836e4f82d_JaffaCakes118
-
Size
132KB
-
MD5
0049b8ba0d02da36afa32d5836e4f82d
-
SHA1
1782a1923ef9793b54d60aa94538915144b3a725
-
SHA256
ba680be219ad90d4d3318552bae2b145ded44d8d032681ff09e7461ec9fe5fcc
-
SHA512
01a8dd8d157bbfdcaaa641e4ad2884e86e5e1f6e939565b4b6a4d22e90ac9dbf75adb0a6295140706af650ae515d40bdb060c89c3718c9e24d03c0c356310632
-
SSDEEP
3072:gD+gD9N9s1G1Ug7gCV6tvL3hEht1PDYDqymPPnxerH43Kvq5pYKpM:+l9s1dgs1L3hOtaDQArY3KvgW3
Malware Config
Signatures
-
Office macro that triggers on suspicious action 3 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/1-ڵʮղѧƼ걨֪ͨ.doc office_macro_on_action static1/unpack001/ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/2-2016ղרѡ֪ͨ.doc office_macro_on_action static1/unpack001/ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/4-Ͻͨѧղר취.doc office_macro_on_action
Files
-
0049b8ba0d02da36afa32d5836e4f82d_JaffaCakes118.zip
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/1-ڵʮղѧƼ걨֪ͨ.doc.doc windows office2003
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/2-2016ղרѡ֪ͨ.doc.doc windows office2003
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/3-ղѧ취.docx.docx office2007
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/4-Ͻͨѧղר취.doc.doc windows office2003
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/5-ʮղѧѡƼ.docx.docx office2007
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/6-ʮղѧѡ.docx.docx office2007
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/7-2016Ͻͨѧղר.docx.docx office2007
-
ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ/ڵʮղѧ2016ϽͨѧղרƼ걨֪ͨ.docx.docx office2007