General

  • Target

    a6080a73e58060402353120431ea9cc3_JaffaCakes118

  • Size

    235KB

  • MD5

    a6080a73e58060402353120431ea9cc3

  • SHA1

    5ecb87df18ce523e9cbf0a2f19f93ff394271ba8

  • SHA256

    6022a0d91d135d29ca1031f7a0ff0e1ba427fd348170ce8213b21c3744d81d17

  • SHA512

    e34810e88e874c341ee2fe544e3d0f9ef299e5d2a8a32730204cc62de7a649489f60a2c7c79b43a6f81d8f36ebcfe3c63eade9330deec66f7ddb2de67b2815b9

  • SSDEEP

    3072:yUwxv5OsmqrmrAKH8edSrrfDx9V5/2MnOPpP36:yUgv5O4rmE6U/7HruMCF36

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a6080a73e58060402353120431ea9cc3_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5