General

  • Target

    21e78c10e726ef8daf7edf2b32af25ae_JaffaCakes118

  • Size

    241KB

  • MD5

    21e78c10e726ef8daf7edf2b32af25ae

  • SHA1

    10b93f75ceb4b6d2682b7e43048977ef14145832

  • SHA256

    8db366d3ef9b2c7b52bb949935f6ed9ac8a7c0d45e19f604c1ceb15eb08cc3fb

  • SHA512

    8908591a92fd54a341ca23d8817955a5bae4aadc1ac7d28a74a25580fd91d18b71789dc7896a794de73c4d5476cbac6506c523a4e79e1e3827b1161f441d9c2e

  • SSDEEP

    1536:CterTkw9HnXPJguq73/IKB5Kby0gBjHrTPRyMK/dRYC0HPQzD2x+n/KwUFkmT:Cvw9HXPJguq73/IKBWyPidS98D2x+Sw2

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 21e78c10e726ef8daf7edf2b32af25ae_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5