General

  • Target

    d6727efecee786955b97e23cf34fbb64_JaffaCakes118

  • Size

    205KB

  • MD5

    d6727efecee786955b97e23cf34fbb64

  • SHA1

    8cebc73cfae02fac7e86527790f811729f0d597d

  • SHA256

    aab0f64583844a255acd24d6b9efacae8a265b60f03bf0103c1bffdbe4804455

  • SHA512

    d7e5d8eccfac50b7ba15c81cec07ba0fa51689bb4a8866c27e7aa4ed845c4cb3f3775b817ac6e51e3c4d9ad095ac16ea71792184d2b37ff2b62771e68de7b16d

  • SSDEEP

    1536:ctPrT8wrLT0NeXxz1DweHHrTPmys5J8buNiafFfJnqTh43uKIxE:c2w3keXxz1DfruDNbtiwIxE

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d6727efecee786955b97e23cf34fbb64_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6