General

  • Target

    1ffd9d3adc21a84ce63a2526af3a2f11_JaffaCakes118

  • Size

    1.2MB

  • MD5

    1ffd9d3adc21a84ce63a2526af3a2f11

  • SHA1

    0d6e1b7647c88fec4b0960216501a9755b73bb47

  • SHA256

    54fa330eca66ee55e09cdb45e873faac0ae4ce3b9c78b9064212780cf1fed272

  • SHA512

    26615a64eb9de532e46287d53ac4fbbdb6ac8cf399071c6a2f0a17f396170114c94f4c268bc144bb3b8868c00fbc7b24be6257f686f1044859bb1fd87799084b

  • SSDEEP

    24576:79TSwdCWTK07BHuShN3O9zioAhSAIEcPuqRg66L79osPoMv6qyAgcXu1q1h9mW3e:LZBHhN3s

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1ffd9d3adc21a84ce63a2526af3a2f11_JaffaCakes118
    .xls windows office2003

    ThisWB

    sh1

    shtr

    mod_CommonFunctions

    mod_Main

    mod_Functions

    mod_BaseForSheetFunctions

    F_Settings

    Letter

    Letters

    mod_SheetFunctions

    F_Templates

    F_SelectTable

    mod_InsertObjects

    mod_Documents

    mod_FieldCodes

    AddinSettings

    ProgressIndicator

    SpecialControl

    F_About

    F_Progress

    FWF

    mod_About_NEW

    mod_Translate

    F_FirstRun

    F_UsageExample

    mod_TestProgram

    Module1

    Module2

    Module3

    Module4

    Module5

    mod_Unisender

    cStringBuilder

    cJSONparser