General

  • Target

    3a4740b4d0b3eef609245c1c968926c8_JaffaCakes118

  • Size

    239KB

  • MD5

    3a4740b4d0b3eef609245c1c968926c8

  • SHA1

    a65282bb66ab93e25f550fe7ccdcf1fa5ce8b07e

  • SHA256

    b96254fad98b7514bed4e75fc29364122a9b37f1b3bb042ea22b783df632043f

  • SHA512

    60a62e85e5016764e8c24a8a05433b71eedb1103326cb324ad7902196f3ae6b0fc0b01f6dd75d24ef7fd07eca86263dd5f11c9cd2c1fbec2333bdad251dc32ac

  • SSDEEP

    3072:D/wDvWETOgnHJcIKBs7gqdSs3zbI1TGaJxquC4:D/avWETrHJ9AWUa6ou5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3a4740b4d0b3eef609245c1c968926c8_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5