General

  • Target

    3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118

  • Size

    204KB

  • MD5

    3a0e37536a5cc0ecb46c1af25736cb8c

  • SHA1

    5eb473ba53b22d0f493fd902feb6cc0678af56c0

  • SHA256

    4d405b4efadbc57b504e51445ba4d74917efdbc758f851802d1563d4b03365a1

  • SHA512

    4e3de166a0310c6cbd880f76d4a7778af4a8060314b10817fe8631d84996626a1caa9ba0329fd1045dddae27e975eff4ad437b1e075f3c97db5e231086addb91

  • SSDEEP

    1536:8tPrT8wrLT0NeXxz1Dwe5HrTPyyw5J8bIQPxCkw7NI40S9e3CqQ0tc8WoSyIoDq8:82w3keXxz1Df5ONQPQb7iS92Cit5W4IA

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6