General

  • Target

    2ab79f345fc698d1bb64c3dbeb7bbb0c_JaffaCakes118

  • Size

    242KB

  • MD5

    2ab79f345fc698d1bb64c3dbeb7bbb0c

  • SHA1

    5911b4cf3dd88aa57a2cc4befcf8942d16ab4adf

  • SHA256

    c619638a4f3ed590cd21c550642851bef76a082b8c82c158c0a23a936c38f0ab

  • SHA512

    eb26d7df51ddb3bdfa5ff0ccbeeaf37341c179a59cdaefe4f4ce5710b3cd3c21705bbb50313288483f5368068e8057c4619f05516918ba6e73408d2559be461b

  • SSDEEP

    3072:1vw9HXPJguq73/IKBWyHgdSQQMV+7md2pAP:1vKHXPJi73wAWUmc76iAP

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2ab79f345fc698d1bb64c3dbeb7bbb0c_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5