General

  • Target

    2914d4fc0c1a6f78b2c8640fc99c89a5_JaffaCakes118

  • Size

    242KB

  • MD5

    2914d4fc0c1a6f78b2c8640fc99c89a5

  • SHA1

    0d3f30d70a75767644fd980335287910ba805543

  • SHA256

    ca6b02386b33bb90d377e760e863ac223dff48a99bfe5f4ab3dbc4119afe3d36

  • SHA512

    dee75bbc5d6056d711dc80d0cd876f84fcdd3277e85281c239d56d6784039e44a53366a329ce4f2bb35764a8d97ba2d640c891077eb22ff216c961c5eaa32c34

  • SSDEEP

    3072:qvw9HXPJguq73/IKBWykUdSY4Vf32Db2mku:qvKHXPJi73wAzUf8OmT

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2914d4fc0c1a6f78b2c8640fc99c89a5_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5