General

  • Target

    3a25292fe19d5066676f858d1af82567_JaffaCakes118

  • Size

    241KB

  • MD5

    3a25292fe19d5066676f858d1af82567

  • SHA1

    2c3001d600fa5aa1272a0f7ddc016ffc5b518709

  • SHA256

    833f6b5376f244a7fc430f88cf060f4b9e441bd8f2c8eaeb0619e72010d9a48f

  • SHA512

    e51449f0015f563faff2ed441f380976bb1a5b81edd8e57e9e7c8eddd52798f0dbc9f3111f0b5458319f638095fb19f03a8b920a04fcec6840c3881bc8edc21c

  • SSDEEP

    3072:4vw9HXPJguq73/IKBWyoidSJ2G52NdZrIz:4vKHXPJi73wA5UJ2Y2NMz

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3a25292fe19d5066676f858d1af82567_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5