Behavioral task
behavioral1
Sample
DOC-46515932250.doc
Resource
win7-20240220-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-46515932250.doc
Resource
win10v2004-20240508-en
windows10-2004-x64
10 signatures
150 seconds
General
-
Target
3e9cc6a886f8a8de30e80eb4adf53c97_JaffaCakes118
-
Size
144KB
-
MD5
3e9cc6a886f8a8de30e80eb4adf53c97
-
SHA1
f7249f7f3b4971f8d45a4ef97f2ebb220cf6766c
-
SHA256
8f6804c3f518f3ad6c94cc9cd5d4fba6edc6618d8d25a5aa492b372b81d05880
-
SHA512
8461e806d7fde65e20a2c0ae9bba8de98835205d3bcbf0407ccdfc267e5158271c0b70115523be55ff71328fba58594df7689be94dcc19a5322648f2037ee23e
-
SSDEEP
1536:oxptJlmrJpmxlRw99NBu+aFwUI4BxanVldfalV0UQwGZJCVwbGOrXWy8:ovte2dw99f7IkbLiNXy8
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 2 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action static1/unpack001/DOC-46515932250.doc office_macro_on_action -
resource static1/unpack001/DOC-46515932250.doc
Files
-
3e9cc6a886f8a8de30e80eb4adf53c97_JaffaCakes118.msg
-
DOC-46515932250.doc.doc windows office2003
qTkihtFkidSBl
EAWwcKGrztX
dYRzzLbt