General

  • Target

    8cbedb1a3e9dbf917eb588d9339a45ce_JaffaCakes118

  • Size

    205KB

  • MD5

    8cbedb1a3e9dbf917eb588d9339a45ce

  • SHA1

    3369001caf72af25182e1ccf616837fbcd36bc9c

  • SHA256

    b920f22b0197c0420415da65e6d627f8fd3f0f2687f02a814a16c877b8f685a4

  • SHA512

    19eb6df239588654bb91ff49aef826bd15fbb1f27e00ee2b8803cf17d624291016fde2e5ae4d500f6d459eee0484269516679e1a46bc06cef7da39900141b961

  • SSDEEP

    3072:TG2w3keXxz1Dfl/7tYB1YjE5HgzUZjpBCD:TG2kkeXrlTtYB1yzzD

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8cbedb1a3e9dbf917eb588d9339a45ce_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6