General

  • Target

    a439a9917b96954a7188e84aa1e286b5_JaffaCakes118

  • Size

    242KB

  • MD5

    a439a9917b96954a7188e84aa1e286b5

  • SHA1

    ee4b80f3953d3f55e4d0b0c4653fc6e8b823309a

  • SHA256

    7bd846695826edfc9e5e5257618dbbb92edc5eb30df2e283476dd30f95a65350

  • SHA512

    891347134225188fc9a3b9f3ba38d3bcf154c0b3c4d9d71caad51037e932d709e27b94d6c4d74538e391f8932fc37f270ca7796c996c89e71baac7e8803bd21a

  • SSDEEP

    3072:vvw9HXPJguq73/IKBWyuAdSeLvMnf4LbiSCtX8R:vvKHXPJi73wAxUeLvMAs8R

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a439a9917b96954a7188e84aa1e286b5_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5