General

  • Target

    94ddadeb5eed0703f42f5e20fa601a8d_JaffaCakes118

  • Size

    238KB

  • MD5

    94ddadeb5eed0703f42f5e20fa601a8d

  • SHA1

    ff714ec9f16ff76e471bd35917729c8b4116f966

  • SHA256

    24f1bfa795be98c5260ff25f42f62c37aac79c49dd23e94138e2ca961d49a10a

  • SHA512

    3a796eaa0cc8f4e1a0676bab8b067a194d67032b47b46568964875039581266efba0af52f055796bda5dff3c1d38225bcd5dec2dc8b88021ff4a54babc73c6fa

  • SSDEEP

    1536:8terU1wDv/6MaETOgnHJcIKBC5bvzJgHrTPsyRK/dRYSvssX7diQEBGa2LU18L0X:8/wDvWETOgnHJcIKBs7igdSSlq0Y1p

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 94ddadeb5eed0703f42f5e20fa601a8d_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5