General

  • Target

    2d5c1e168416a803d4879b94b3538bbb_JaffaCakes118

  • Size

    242KB

  • MD5

    2d5c1e168416a803d4879b94b3538bbb

  • SHA1

    3eb557053a63a60364671f0db5fe69409acf74f1

  • SHA256

    5e5fa431c6f09f89aaf518d7eca925f36a0f02e3fd73a64acd199137c0b07cec

  • SHA512

    7184e3270f2047030e47780621f2201f0777f661590edab21aa9fcb499c1c8b2eee54d104dd4da95e30db81562972ce2258376be7fd838931c6fe6b7dc0229ef

  • SSDEEP

    3072:vOw0pklIiuq73/IKBds4udSaDiJ8/Ij6aChn2q:vO5pklIo73wACUaDiu/W6aCJ2q

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2d5c1e168416a803d4879b94b3538bbb_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5