General

  • Target

    a38d5f05abe88f16e14965851ce4f152_JaffaCakes118

  • Size

    205KB

  • MD5

    a38d5f05abe88f16e14965851ce4f152

  • SHA1

    b53e8def918dda763f06b228b251de7f93343bd9

  • SHA256

    61e199a6d6fc4f55914f8c25e5ea31970c8b8c9179b2dfd85b5c5c0f7524243a

  • SHA512

    492ef6dfac42027d25876597237e4ea2253441e6331064272d1a73136eb43ad92ccdeb1ab3db385ffd90b2f31918b5fe605c1e42546da2f4e7e66573cb75bcc8

  • SSDEEP

    1536:jtPrT8wrLT0NeXxz1DweRHrTPwyK5J8bj++Q5YQTZWPxBnh51IdTew:j2w3keXxz1DfRCHYQ22

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a38d5f05abe88f16e14965851ce4f152_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6