Behavioral task
behavioral1
Sample
973fbc8411b62a64fe079e7b50f663fa_JaffaCakes118.doc
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
973fbc8411b62a64fe079e7b50f663fa_JaffaCakes118.doc
Resource
win10v2004-20240802-en
General
-
Target
973fbc8411b62a64fe079e7b50f663fa_JaffaCakes118
-
Size
241KB
-
MD5
973fbc8411b62a64fe079e7b50f663fa
-
SHA1
592a277ed9b564df350fc4b7f5f68b439d4e33ac
-
SHA256
a2f5d168e115027b80d8445fd7b48504a49b2d04c603e404ac1f2d4ec2708a0b
-
SHA512
26e8dec8b6428b93e1e304d68a2f8b94ddf8905e125341e069781fa3e79478dc276ebab8420e5ec1101923ebcee7f88db64485f51d679efdd8a69c0d010db317
-
SSDEEP
1536:0terTkw9HnXPJguq73/IKB5Kby0g1CHrTPmy3K/dRYBEbk6TXubT+rWwta:0vw9HXPJguq73/IKBWyOcdSabVUTYhta
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
973fbc8411b62a64fe079e7b50f663fa_JaffaCakes118.doc .eml office polyglot
ThisDocument
UserForm1
UserForm2
UserForm3
UserForm4
UserForm5