General

  • Target

    01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118

  • Size

    515KB

  • MD5

    01aba404d2c25cd84fcab7d242ef03c6

  • SHA1

    93d3a3cc44e089858f73e30466593ef5408d212e

  • SHA256

    b39a26cc8f1aca8184213c60766efa64aee0ee3f6bcab5cdf5ba54c70da046f6

  • SHA512

    dca06a51a4e1ca5021d1d97c75d110093b3141a209e52dcfc56c860ac91287afab1f90d372255ee164ea0ed59cba53b53a5a6db47226d1a32027eee65408224f

  • SSDEEP

    6144:g0KbHs1COUgvsUovEYTSOdvftKzZl7mf/F/KfljP3dzu0B:3ys1COJYpNc7mf/F/KfljP3s0B

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118
    .doc windows office2003

    ThisWorkbook

    BL_AttachmentIndex

    Blad2

    SQL_2ba

    FRM_Login

    BL_RelatieTabel

    FRM_INFO_BestandenComtroleren

    FRM_GLN

    FRM_FTP_Login

    FRM_ExportAtt

    Bestanden_downloaden

    FRM_Downloaden

    BL_Producten

    BL_Overzicht

    MOD_MatchProductenvsAtt

    MOD_ImportProduct

    MOD_XML

    Mod_Public

    FRM_ImportXML

    MOD_BestandenControleren

    BL_Artikelen

    MOD_ImportArtikelen

    MOD_2ba

    MOD_Grohe

    Blad3

    MOD_Update

    SH_Loging

    Mod_AttachmentAttributes