General

  • Target

    4856a8cc6c4ed0f2d9c983f7ec5769f2_JaffaCakes118

  • Size

    238KB

  • MD5

    4856a8cc6c4ed0f2d9c983f7ec5769f2

  • SHA1

    2f981a3325c3fbc44f74d6af5dddd904b35236ec

  • SHA256

    96aedb9b7ba5e583d55ef22ddd05962c1f002e064e6f5782fd24a440931f9afe

  • SHA512

    e9d0db369df14e68a09aeac1cd288f98211ef7427cf5e5726be5f8d173692841ed1a74927bbba89c44110356ad4e21c09d1d6490d54dc22eefff32a77cfdee23

  • SSDEEP

    3072:J/wDvWETOgnHJcIKBs7/GdSist+dTXpiK:J/avWETrHJ9APUh4VXpv

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 4856a8cc6c4ed0f2d9c983f7ec5769f2_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5