General

  • Target

    2df104ca554b5af585c52653662220d7_JaffaCakes118

  • Size

    241KB

  • MD5

    2df104ca554b5af585c52653662220d7

  • SHA1

    e17a05d968155b61b1a5c01e1f57b1c5b42ed412

  • SHA256

    ed61a3a702d05bf49631ca33cf5be3d19de14a76fb9061e580a796bc84fa2ac4

  • SHA512

    74befbda871677f50c929829361e206fe8dcf64ef8c1d7b6d0d68d932f04c98590812240805983838f12a751a084baaac4c53f9d4314b771578ef06c384f98af

  • SSDEEP

    3072:yvw9HXPJguq73/IKBWyCKdSFsgJLrAT+rtMrS:yvKHXPJi73wAzUhJLltoS

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2df104ca554b5af585c52653662220d7_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5