Behavioral task
behavioral1
Sample
93947e83beb5d32cf4c7629ffc0f8f52_JaffaCakes118.xls
Resource
win7-20240220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
93947e83beb5d32cf4c7629ffc0f8f52_JaffaCakes118.xls
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
-
Target
93947e83beb5d32cf4c7629ffc0f8f52_JaffaCakes118
-
Size
800KB
-
MD5
93947e83beb5d32cf4c7629ffc0f8f52
-
SHA1
3457cbbff2c3f082845d70c73b01f7b701bc7e46
-
SHA256
10d18fd63dd3e1ef41092d96e8659b376e473ae7e5d36a6dd97a244ce72a28dc
-
SHA512
a208d5daded0d39e342a34d38fc2b4b77572c655566fe3f1cf4950ccbe86d3f10313b5a73ad05b313dfe59df8d14461bf7b065885efe168151e0d789bbf07806
-
SSDEEP
24576:rfdIUF1lE/cQkWh9LakART0eZVcurpXDpGy5hD:zdIU
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
93947e83beb5d32cf4c7629ffc0f8f52_JaffaCakes118.xls windows office2003
ThisWB
template2
clsCode128
mod_Labels
mod_Functions
F_About
F_FirstRun
F_Progress
F_Settings
FWF
mod_About_NEW
mod_Main
mod_Translate
AddinSettings
SpecialControl
ProgressIndicator
shtr
mod_NewFunctions
mod_SelectTemplate
template1
mod_Barcodes