General

  • Target

    19fd5e1d04ad6ea445dab65988093e99_JaffaCakes118

  • Size

    239KB

  • MD5

    19fd5e1d04ad6ea445dab65988093e99

  • SHA1

    a356ca41b0a82b80dbdb648037a65e704e249f20

  • SHA256

    94a0f0d7d28fc833393be8e40cffac770f02ba50e996d3894a846f78953986d5

  • SHA512

    65aedb9c1c5e2b9c1adda776d6782cee4e6137d3cee9f31329a310411d7c5247b57f3102b886ec4947eca8d9f0f47b47dcb0b8c428fdb41adba5862cc370287b

  • SSDEEP

    3072://wDvWETOgnHJcIKBs7KCdSBq23/0Alp0l://avWETrHJ9AsU42v0A32

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 19fd5e1d04ad6ea445dab65988093e99_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5