General

  • Target

    2abb09046ac82e562b9e6ffdbe63267f_JaffaCakes118

  • Size

    241KB

  • MD5

    2abb09046ac82e562b9e6ffdbe63267f

  • SHA1

    137b20a5c8e153a4ed79e9662c61c357eb6c5991

  • SHA256

    25b2463af8c6f115e4a0e87a41fe08b789e549e7afba667fb32fa38294f18e64

  • SHA512

    2c9b1115f7c8162f47e19f46cfcce946ebd41a47b0ff92dbe17a8a8ff7f7f160bdfc5cbe597209150041e86a0a57612729f578cff9ef69e2dd00e593851640d9

  • SSDEEP

    1536:YterTkw9HnXPJguq73/IKB5Kby0g9jHrTPFyoK/dRYpIcO90jVDKifvMpJmCfz:Yvw9HXPJguq73/IKBWyrGdSeH+KiHYH

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2abb09046ac82e562b9e6ffdbe63267f_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5