General

  • Target

    5efe9bcf2cfcb3ee4d3e7f7aad6babfb_JaffaCakes118

  • Size

    242KB

  • MD5

    5efe9bcf2cfcb3ee4d3e7f7aad6babfb

  • SHA1

    b4cd43ca26e5637927401b765a126dac42010885

  • SHA256

    045b8653eb8ec7d3b9cd494c1712a651d88c860aed47596408ec5edadd74128c

  • SHA512

    9081e2e60ae587a92b378cd8fdfda7ad724a40ed69033bc40afc91857d6cb9e8930ae14e52927f99c5c96bb1f64e9f3b1c7f8133f091ce1cf0fe9332696d7526

  • SSDEEP

    3072:DOw0pklIiuq73/IKBdsyEdS6rwGCm6RUK21:DO5pklIo73wAeUt4

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 5efe9bcf2cfcb3ee4d3e7f7aad6babfb_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5