General

  • Target

    49104353328aff11ff7fc279d165a3f6_JaffaCakes118

  • Size

    242KB

  • MD5

    49104353328aff11ff7fc279d165a3f6

  • SHA1

    e1406b75933b897607ed0165941281c8000f6296

  • SHA256

    64006493ab6e03d66ea556b586ab5c20c5c70136667565bf8ff9cd4324fab2c3

  • SHA512

    ab652d8e8db200b9dee74fa6d67a06177f96eabe706ec2020907770faac5aec80937eb9e1069c1e51b2f6379d7a83025b6ce9753b76f860526d565601d7ca096

  • SSDEEP

    3072:fOw0pklIiuq73/IKBdskIdSXUsCutSiW3qBbR:fO5pklIo73wAsUXXCutrz/

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 49104353328aff11ff7fc279d165a3f6_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5