General

  • Target

    40daf2ba7c0639cd3a0705e83d31fa9b_JaffaCakes118

  • Size

    238KB

  • MD5

    40daf2ba7c0639cd3a0705e83d31fa9b

  • SHA1

    f297fb2e021a857ab05aa9b6d39387b312f5b4f4

  • SHA256

    5efb3b95e84651821815804e1ea233854160a2d6bdb05b000c36127b5bd06eae

  • SHA512

    7be886b3c00548439a5f6b10e86f0280968487369970aff7702c05e5aa1f3d0fdf60f6b009c9fe14cf22679e3722e9347e5ce5ce2f9dda288bb8da1bb76d0d6a

  • SSDEEP

    3072:ZAw1vPEfOgnPJceKBDaJSdS5E4Yso+uspaCpQ:ZAKvPEfrPJBAlUVo4p+

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 40daf2ba7c0639cd3a0705e83d31fa9b_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5