General

  • Target

    cf5674a687c71b4820e79f3bdb71745a_JaffaCakes118

  • Size

    242KB

  • MD5

    cf5674a687c71b4820e79f3bdb71745a

  • SHA1

    e06692d92ccaa2253ef3e2ea09e7ce74503a93df

  • SHA256

    3ac8ae94a9a731a408a876b65e61f1b700b79b2927a1bd0a9a8948e7eb2bbbd4

  • SHA512

    378b104e371f3b7f7b30239d160564b1a1bdd95ed4c4bb4b6dab1f490e7a5813f8dd958d1033f38b88413934791e9fefa4da94ff3d3916947c6304c7e8d7e4f7

  • SSDEEP

    3072:Qvw9HXPJguq73/IKBWyz+dS6SpZH/uVVgo:QvKHXPJi73wAsU6STfuVVgo

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • cf5674a687c71b4820e79f3bdb71745a_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5