General

  • Target

    ab90ae28477f6253fec63f9e0641e784_JaffaCakes118

  • Size

    235KB

  • MD5

    ab90ae28477f6253fec63f9e0641e784

  • SHA1

    4029d87628af651469396945f6fbd939ca7632e0

  • SHA256

    9f37a2eea507a1c9f57cf108f87e09f92330c4587a0d4e728c085df193bc2e59

  • SHA512

    105557b250b5d68548505f27a3809a65b53ee8a3c3a1fa80c8e8e933063be6f27a4a9b830cb1cf5de2285bb6daa5c383abe3f80339e66e24d5ee1b690c6e56ba

  • SSDEEP

    1536:DterihwjEu5s1mermyzrKXhbqHHrTPBysK/dRYhFWnGldJMeCwMpf47jAMMe:D/wjd5s1mermyHKxWSdShFQGaelMG7se

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • ab90ae28477f6253fec63f9e0641e784_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5