Behavioral task
behavioral1
Sample
3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118.doc
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118.doc
Resource
win10v2004-20240709-en
General
-
Target
3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118
-
Size
204KB
-
MD5
3a0e37536a5cc0ecb46c1af25736cb8c
-
SHA1
5eb473ba53b22d0f493fd902feb6cc0678af56c0
-
SHA256
4d405b4efadbc57b504e51445ba4d74917efdbc758f851802d1563d4b03365a1
-
SHA512
4e3de166a0310c6cbd880f76d4a7778af4a8060314b10817fe8631d84996626a1caa9ba0329fd1045dddae27e975eff4ad437b1e075f3c97db5e231086addb91
-
SSDEEP
1536:8tPrT8wrLT0NeXxz1Dwe5HrTPyyw5J8bIQPxCkw7NI40S9e3CqQ0tc8WoSyIoDq8:82w3keXxz1Df5ONQPQb7iS92Cit5W4IA
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3a0e37536a5cc0ecb46c1af25736cb8c_JaffaCakes118.doc .eml office polyglot
ThisDocument
UserForm1
UserForm2
UserForm3
UserForm4
UserForm5
UserForm6