General

  • Target

    2e6969aa8eea539ed971b00d0c8d6062_JaffaCakes118

  • Size

    241KB

  • MD5

    2e6969aa8eea539ed971b00d0c8d6062

  • SHA1

    2c4ebb07c9ade8a3eec82610e032fca20e7c75c2

  • SHA256

    4a7def00aa44ad6a5a51cf9e806fd4497a385886396dd4564a12169b5f6d3dde

  • SHA512

    ecdedefe1c78b429e0b7e00c234383d4abb0bf5a9bf19827cdfd43125d3b4f0762179b73e92c4a0d95388d0b905584119d7f5b8aca80ce09cb68c526ca40f241

  • SSDEEP

    3072:8vw9HXPJguq73/IKBWydIdSGGxGKkBE7tKq1:8vKHXPJi73wAsUbxGxx4

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2e6969aa8eea539ed971b00d0c8d6062_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5