General

  • Target

    0b9492d7ade976b58f9b394fc7590c0a_JaffaCakes118

  • Size

    242KB

  • MD5

    0b9492d7ade976b58f9b394fc7590c0a

  • SHA1

    2186b1b082d111f73affb5b221ec1cb1bcf0bd83

  • SHA256

    59297535dde26fb8baef0a470fa36fc86c7af17abbeb646f8f9a7c5143131e5c

  • SHA512

    8df0cb883d602fa56e074bb59833112e41d1708637b808de8f88d6fe0774c2609312caabb4788bf92ab6d4d82757f94163d5d086087302a80587e9a532ec6feb

  • SSDEEP

    3072:KOw0pklIiuq73/IKBdslOdSzdupOVRIfpXh:KO5pklIo73wA5UApOnIfT

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0b9492d7ade976b58f9b394fc7590c0a_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5