General

  • Target

    da598808a3646dab2fe5c7918a238eef_JaffaCakes118

  • Size

    238KB

  • MD5

    da598808a3646dab2fe5c7918a238eef

  • SHA1

    196b594ca6c638a8cf67540549b6541d8a6637ad

  • SHA256

    df899b3148c1d3bf389e0791ac0ceeba4ea7e8c634d7166d62616495ed655035

  • SHA512

    993cace2c83297e99dd2508bd7ff66050f221e24c1031a28c273d075f37950ceea2410d16a16f0a294bc37e4c48fc619034b565c476b2773ad12520c03786ee2

  • SSDEEP

    1536:pterU1wDv/6MaETOgnHJcIKBC5bvzuYHrTPMyxK/dRYSkLZRACAHBty4WLWhN:p/wDvWETOgnHJcIKBs7NAdSnTCHBtBN

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • da598808a3646dab2fe5c7918a238eef_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5