Behavioral task
behavioral1
Sample
01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118.doc
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118.doc
Resource
win10v2004-20240426-en
General
-
Target
01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118
-
Size
515KB
-
MD5
01aba404d2c25cd84fcab7d242ef03c6
-
SHA1
93d3a3cc44e089858f73e30466593ef5408d212e
-
SHA256
b39a26cc8f1aca8184213c60766efa64aee0ee3f6bcab5cdf5ba54c70da046f6
-
SHA512
dca06a51a4e1ca5021d1d97c75d110093b3141a209e52dcfc56c860ac91287afab1f90d372255ee164ea0ed59cba53b53a5a6db47226d1a32027eee65408224f
-
SSDEEP
6144:g0KbHs1COUgvsUovEYTSOdvftKzZl7mf/F/KfljP3dzu0B:3ys1COJYpNc7mf/F/KfljP3s0B
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
01aba404d2c25cd84fcab7d242ef03c6_JaffaCakes118.doc windows office2003
ThisWorkbook
BL_AttachmentIndex
Blad2
SQL_2ba
FRM_Login
BL_RelatieTabel
FRM_INFO_BestandenComtroleren
FRM_GLN
FRM_FTP_Login
FRM_ExportAtt
Bestanden_downloaden
FRM_Downloaden
BL_Producten
BL_Overzicht
MOD_MatchProductenvsAtt
MOD_ImportProduct
MOD_XML
Mod_Public
FRM_ImportXML
MOD_BestandenControleren
BL_Artikelen
MOD_ImportArtikelen
MOD_2ba
MOD_Grohe
Blad3
MOD_Update
SH_Loging
Mod_AttachmentAttributes