General

  • Target

    1bbce2fce2125d3703add4c34afe4681_JaffaCakes118

  • Size

    242KB

  • MD5

    1bbce2fce2125d3703add4c34afe4681

  • SHA1

    9cbb9c595a456ac5b4ae500d5fec0f7ead14b2db

  • SHA256

    9dbb71bda4d78d7f32c3bdbb0495cab67c631cf04c09f618b3357ad0e0569440

  • SHA512

    f42013308725603b9b212eca21f208a30db3a1e7c6977029ca2cb8671974aa0cd25bd371d5e21e90c6f5b9d7bb625040ff8ebde1085e30eda3d2ba36bea9ee80

  • SSDEEP

    3072:OOw0pklIiuq73/IKBdsXydSafSjcU4OKAls3zU:OO5pklIo73wAvUafSjX2+MU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1bbce2fce2125d3703add4c34afe4681_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5