General

  • Target

    353e32f0054d1766516bd39b165ee248_JaffaCakes118

  • Size

    205KB

  • MD5

    353e32f0054d1766516bd39b165ee248

  • SHA1

    b311b9584c7befd351622c3735d48e6888973969

  • SHA256

    7aa1dc737e72e83db5cf18babf7487e1b821fbacae80347654a65625f25918e2

  • SHA512

    fbdea409e0e40b0b696f9872f2f5d93bbaf4a15ad7e7fec297debea28e8c1eb33500cd703c9c18893f1d5a48ebcb977be7dde5a4522b5c88d974b4782dcbc73e

  • SSDEEP

    1536:KtPrT8wrLT0NeXxz1DweIHrTPbyl5J8bSxw8CNxORZ7aFmLWdYWUyD4GkK:K2w3keXxz1Dfk40o/eFmqJ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 353e32f0054d1766516bd39b165ee248_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6