General

  • Target

    c79b08b94458b787c84dd0bdedde5b2b_JaffaCakes118

  • Size

    243KB

  • MD5

    c79b08b94458b787c84dd0bdedde5b2b

  • SHA1

    9d6b0a585848d25f69939e71be3b879263d9dfde

  • SHA256

    ece2899a0ce0f8d2efecee5fa5af9f7cc28ab5496ceae21bd67a2f0b4d527f64

  • SHA512

    d2b8375376711ccd49c9188b216861bd3d26ca011f87bf2b814f69dfff5732963fffb96f54a0b1312efd75c608163aec36bb0640960576903609e7d45549120a

  • SSDEEP

    3072:0Ow0pklIiuq73/IKBdsxYdS0Sqw7HNlVD1lxW:0O5pklIo73wA3Ujq4jVDw

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c79b08b94458b787c84dd0bdedde5b2b_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5