General

  • Target

    3895e49e029dc57eb134b9133c663a74_JaffaCakes118

  • Size

    242KB

  • MD5

    3895e49e029dc57eb134b9133c663a74

  • SHA1

    ab740e58800190cd2d2baa31463df38202226e73

  • SHA256

    c4f54823003ba8e64913ae2d0d335d42fc82d17c3e58e9ffdd9fd652a11f71f0

  • SHA512

    971bc6684e9dbe0b081d2e4f8fe5ccb648826cfc68114661bbda83dbb51b0cce894b34f5c1b25ff99c70565f4c94f70001bd73f9e9791dd8fe20506c09dde003

  • SSDEEP

    3072:1vw9HXPJguq73/IKBWywadSk38pnADdpREH:1vKHXPJi73wAdUpnAdpSH

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3895e49e029dc57eb134b9133c663a74_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5