General

  • Target

    76180af26d84765fc385244f9a26f137_JaffaCakes118

  • Size

    242KB

  • MD5

    76180af26d84765fc385244f9a26f137

  • SHA1

    9c343d9fd7cdf19d3ecdc241756af5c99f301c2a

  • SHA256

    b49817e299cd7556fa7d99c5a3e3c02b33a3a043e2310c2eafe7622a031cef79

  • SHA512

    289384eba900605486194422f220501ff11cae224857bb0527f0fd78a9f78a7a23ef9b24a0c519ae648246d1d7b4f9818be0ccc2cab6c65f7970243b1a360172

  • SSDEEP

    3072:bOw0pklIiuq73/IKBdsxQdSjDZyhK1/XB:bO5pklIo73wADUjohK1/XB

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 76180af26d84765fc385244f9a26f137_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5