General

  • Target

    3f903a191f6debe1f33c41ef119e7d51_JaffaCakes118

  • Size

    195KB

  • MD5

    3f903a191f6debe1f33c41ef119e7d51

  • SHA1

    b80fb0efffab3e622b144cd18b94621540883fff

  • SHA256

    8f59b404bca8c08e1d577c4eae5fc0f07d73ce1a949d3b3adce40ddee126c871

  • SHA512

    42ac2c39ce6280ee7cfcc8639dc6ed3f11895298e353a4e104e73f43d0f6220f8c61cccb473c6e0f8ac6143004973b8feb3244ad996834aef462c428b2494ea5

  • SSDEEP

    6144:N5tnmZ1JezZS6baMHRIAA7JBOu9EQ8LtklSYuT:Na9ezZ/HXA7yu6kkYS

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3f903a191f6debe1f33c41ef119e7d51_JaffaCakes118
    .zip
  • cpck.doc
    .doc .vbs windows office2003 polyglot

    ThisDocument

    CPCK

    IntroFrm

    Page1

    OptionsFrm

    PayloadFrm

    Export

    Done

    vsmp

    RegFrm

    InsultFrm

    WDMfrm

    PlugInFrm

    Class1

    About

    Main

    TriggerFrm

    Greets

  • file_id.diz
  • readme.txt