General

  • Target

    77da9a81e4a237e14f71e252f8138a6a_JaffaCakes118

  • Size

    204KB

  • MD5

    77da9a81e4a237e14f71e252f8138a6a

  • SHA1

    08cad4f9d206bdeb055a213864d23ee9948eb3d1

  • SHA256

    6751348b497ecbb2570237d0223531ad7eadf3a3456fc2c6aa0b8fc39c142a81

  • SHA512

    19d896563fa70fbe064fd78345c018c3f9e3113494307915d228efa76a16f85e07ea6e94bc7a1274a3fc0d6a90e2184896218e8dadafa2396928aaeed7408211

  • SSDEEP

    1536:qtPrT8wrLT0NeXxz1DweYHrTPXyJ5J8bUpp0tPHasuJtPgThOltuQFNpPdJ:q2w3keXxz1Df0Y3YJ4vSO6gPD

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 77da9a81e4a237e14f71e252f8138a6a_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6