General

  • Target

    aa9524d11c23c4ec73dac7e4ad345283_JaffaCakes118

  • Size

    242KB

  • MD5

    aa9524d11c23c4ec73dac7e4ad345283

  • SHA1

    8a41489da83b93573e513e0f0be749944daabce6

  • SHA256

    3fa48b06f283280e7e0e742325e7cf36be9892611a230ad3d867b3ab8066d6f1

  • SHA512

    f56e14de95b06e0e9c366a7c2d92561c0f03a24bcb14bd913d95dadccf1a31b7b04b89adda9ba1ef777102e978b3ac8e398bdf583333c6f2c5d613fe19061d8f

  • SSDEEP

    3072:mvw9HXPJguq73/IKBWyvUdSCQaPI0cj+C3:mvKHXPJi73wASUCQr9x

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • aa9524d11c23c4ec73dac7e4ad345283_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5