Behavioral task
behavioral1
Sample
1c077cc5aaed967776c5971699a4d922_JaffaCakes118.doc
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c077cc5aaed967776c5971699a4d922_JaffaCakes118.doc
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
-
Target
1c077cc5aaed967776c5971699a4d922_JaffaCakes118
-
Size
242KB
-
MD5
1c077cc5aaed967776c5971699a4d922
-
SHA1
ca4144ee4c8168e5999296b99e0a80884d9378c1
-
SHA256
63109f65ea91bac55d00896b94c60d27a02ad7e80100d4a9d5c7a4ed5fee653d
-
SHA512
7d4f4c17a4b92301dcadf204d90552ba4f2d3264282c0fa71e304e32be7aca93b5938a3eca990bbdf4111f2aad5442c10215cb751deabbf9282519cdd7735185
-
SSDEEP
3072:2Ow0pklIiuq73/IKBdssGdSoIBncVBSZd:2O5pklIo73wA2UZBncVYZd
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
1c077cc5aaed967776c5971699a4d922_JaffaCakes118.doc .eml office polyglot
ThisDocument
UserForm1
UserForm2
UserForm3
UserForm4
UserForm5