General

  • Target

    1414c7d6863ef79a8878e10827c160fd_JaffaCakes118

  • Size

    241KB

  • MD5

    1414c7d6863ef79a8878e10827c160fd

  • SHA1

    fa5329e778b093e2fce434a3186206cdbf36a966

  • SHA256

    a2b7c46680fa78c6b81870b168e3bc384b7b88162825c89c6a83f83aff0dea8a

  • SHA512

    73c56958eaed34e107e4320d6656f6b90203284eadca29bf7d84fa97a563901db62438639799b79eafab49f5b0483e78cd9d41cfa6ccd0219b88f48df9f3483b

  • SSDEEP

    3072:7vw9HXPJguq73/IKBWy+QdSWn1duBJMhY:7vKHXPJi73wA1UWn1gJ5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1414c7d6863ef79a8878e10827c160fd_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5