General

  • Target

    dce779bb33aea5ddf58da0f13cf57f8b_JaffaCakes118

  • Size

    205KB

  • MD5

    dce779bb33aea5ddf58da0f13cf57f8b

  • SHA1

    8ff223dd730151782e09759dabeb37b18a7c9c3b

  • SHA256

    616d7b68bef7607d3772231bafd8993c01afa0ed8f1ee466e3f3da8110055114

  • SHA512

    9fba80dd920e49583708941f199e54d1b7d01929b8168614050a1c6280d10732e5f4ab63728e0dff3e9aab6165aa3bb71dbd2305ebecc223f547864ea6c8592e

  • SSDEEP

    3072:4uHIv2w3keXxz1DfwP+CV9Q6g5BiicSY6o:a2kkeXr8Vg54d

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • dce779bb33aea5ddf58da0f13cf57f8b_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5

    UserForm6