5ebbd3592172894f72dcff4fa67a8140_JaffaCakes118 | Triage

Sharing

General

Target

5ebbd3592172894f72dcff4fa67a8140_JaffaCakes118
Size

174KB
MD5

5ebbd3592172894f72dcff4fa67a8140
SHA1

2be240b8fa5155765086ac325e7b1f55d5dd1750
SHA256

0a3a43586443c87bb11108697927389ef23bab9ba0bee5d4d84b49420ed137e2
SHA512

bdacc3dc09b84409bee5ff8e2f7a9d9c4b4eac97c2b3cf874c2319b8ffec8289f46621279d9f12bd2eb2f962df7332905aa689492cac61c2af5b27ba93c472f0
SSDEEP

3072:mxjnB29gb8onQTSvhx3rezujg8ZfE5oPn0aw7:mxyzT4hdqWeWnP

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

5ebbd3592172894f72dcff4fa67a8140_JaffaCakes118
.doc windows office2003

amFAQmi

uouvHKXJZi