General

  • Target

    d1c34f3ea6ba274dbc73faceaabdeab8_JaffaCakes118

  • Size

    205KB

  • MD5

    d1c34f3ea6ba274dbc73faceaabdeab8

  • SHA1

    436ce39f6271362d17f1a29a25f17854b8939073

  • SHA256

    af6e6afd6700a95fef0c3e911a795ef33092447783a5c3479f6823ff4465aab4

  • SHA512

    f3c75e6b2e8b9798ae7a29e5e8798ec4c497f3725f834b1ce392047c707d77f4bbf7113e3067be4ebf48bf7cc81d2667f2127bbdfd09f9d00920cdc7db02d08a

  • SSDEEP

    1536:stPrT8wrLT0NeXxz1DwexHrTP7yV5J8bu7+ZgxWIrBAtGb0BMhj4/hI3tQ3:s2w3keXxz1DfxYn+VIKGbeIW

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d1c34f3ea6ba274dbc73faceaabdeab8_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6