General

  • Target

    c2338d8c7519f5dd18b68c5987738de0_JaffaCakes118

  • Size

    242KB

  • MD5

    c2338d8c7519f5dd18b68c5987738de0

  • SHA1

    1728a998445ea6cf6ef5abb12d702e242be91f5d

  • SHA256

    cb5dcef06d8765e61ddace1043c67c8bd4177bdade687c4fa99b5533e55c251b

  • SHA512

    0caa75453e3f9ca30552b7215d0204d2e1b622e87fb7bb7d664bd3b210cffbe2ad34e737b9e9b90c86da3672134121e2a0191b27f8384e003fbd8b62b778689f

  • SSDEEP

    1536:8terikw0HJzwlIiuq73/IKBPdbs0g4UHrTPAy9K/dRYYgBOFQaGoei7QZn47TRh/:8Ow0pklIiuq73/IKBdsDodSY6Q7CdM

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c2338d8c7519f5dd18b68c5987738de0_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5