General

  • Target

    bcd3ec5400fa4cb242f008ecd6512cf2_JaffaCakes118

  • Size

    242KB

  • MD5

    bcd3ec5400fa4cb242f008ecd6512cf2

  • SHA1

    f639196c23f0513881a9fe770348bf6db73e7320

  • SHA256

    80d501d15a233acbb19b68358c09d0fb3a9f714a5ebc09b74f16dd50ccb5dc10

  • SHA512

    c8ad2f9cc6e818da331153361d3c2d60a305547d9baed2b0a6b1d721806379b035f5242d32ee20dd2a5531777259c2051f3ca6db1c2a0a1df5e00aa3fe5811d3

  • SSDEEP

    3072:2vw9HXPJguq73/IKBWybudSiIajnAua2rM2DUY:2vKHXPJi73wAAUiI/wrMvY

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • bcd3ec5400fa4cb242f008ecd6512cf2_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5