General

  • Target

    326a8309b201104f041a03a714218dc1_JaffaCakes118

  • Size

    205KB

  • MD5

    326a8309b201104f041a03a714218dc1

  • SHA1

    ef4b057589e8f3bf02f8e972050c5b5ea83d4d02

  • SHA256

    f35a063bba28bd19d83b407fb9ae5a611d8810942f919414df1f8a807f4dfa40

  • SHA512

    c190a86984a3fe87be5c51c2934dbf0c69eb394be006461ab2d473a90988dea7fbc80662a6bf590ad1cac84f64eb468a5c1173d1c3a314e4ab0378dec520160d

  • SSDEEP

    1536:wtPrT8wrLT0NeXxz1DweFHrTPmys5J8b4slzDUqhy7oMSTMKj3:w2w3keXxz1Dfl6ByDUpojTMO3

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 326a8309b201104f041a03a714218dc1_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6