General

  • Target

    a80156ea12e64b2d53a00049e71e5b67_JaffaCakes118

  • Size

    241KB

  • MD5

    a80156ea12e64b2d53a00049e71e5b67

  • SHA1

    a169b46ac50263dff72d4c40528e588bba525817

  • SHA256

    e5dceed44432d7e1335d2e538b29e6df6371d12f3f9d13966c66d6e943c7d7a1

  • SHA512

    1160309cb1c01738eb82e2f02cc5ac0ad64e66bdde2028ce824bf83b29d62dfd428c58fb72ab4a6bcacbca0662c6dec32ddc5ab34c1fa2b63b5fdac48235514f

  • SSDEEP

    1536:BterTkw9HnXPJguq73/IKB5Kby0g4FHrTPfyeK/dRYklMLjAz7nBmBSU:Bvw9HXPJguq73/IKBWyeCdS7Uz7QsU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a80156ea12e64b2d53a00049e71e5b67_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5