General

  • Target

    14b6e358fa83990ded4e40dea72748ac_JaffaCakes118

  • Size

    241KB

  • MD5

    14b6e358fa83990ded4e40dea72748ac

  • SHA1

    7279cc1d21130efd443a0b4e5b12f65b1ee3d69f

  • SHA256

    740e3991a1d9178a251a1f0fa3733182207382cc077818cfe1db2302849b9ff9

  • SHA512

    8cb5eeb514497a783d88c1d5bd011ece7e12073cebd8eaef7eeb35db96deedced08985e5e92fdd50c6fd06e7b5ecd33d5c16ecf248b338dbfd414052fb39f9e1

  • SSDEEP

    3072:Svw9HXPJguq73/IKBWySSdSAG4AaODz4wfyAVZ:SvKHXPJi73wAHUAG4if4KyAVZ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 14b6e358fa83990ded4e40dea72748ac_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5