General

  • Target

    ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118

  • Size

    2.1MB

  • MD5

    ea04d1318ac15dd3ecee186ac5c3fa01

  • SHA1

    262d488b40d733baa319be18cb36af9452a3ea96

  • SHA256

    98fac6d599808748f1e6b39a1a39dab6c4e0f1f1fd6f1c480474113a4edf2129

  • SHA512

    d7b84724c0669b3e3963742ae27a93fe7c77010d7c34cb792ef0a970d550dd08e75bae0cd66b0900edf80148098a4e9c0e9c245ea5841f7ffb7f488b19d2f385

  • SSDEEP

    24576:6u7r/0lAnHcwZekBQ/1idmgEBzzW28RMytrD68Muhxz0wbpn6kif6HWvq:6ufM29c1wNxRbp

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118
    .xls windows office2003

    xlsBook

    modHTTPServerCaller

    cHandleEvents

    modInternetConnectionState

    modUpd_Templ_HTTP_Request

    TSH_et_union_vert

    modUpdTemplMain

    modInvokeHTTPServer

    modUpd_Templ_Defines

    modServiceModule

    modUpd_Templ_Caller

    TEHSHEET

    TSH_et_union_hor

    modGlobals

    modDefine

    modClassifierValidate

    IMessageWindow

    modScrolling

    modfrmReestrMR

    modRegion

    List00

    List01

    modHyp

    Wrapper

    TSH_REESTR_ORG

    modAnimatedFormsGlobals

    AllSheetsInThisWorkbook

    frmReestr

    Instruction

    modUpdTemplLogger

    modfrmDateChoose

    ListComm

    ListCheck

    modReestr

    modfrmReestr

    MessageDialogue

    List02

    frmRegion

    frmReestrMR

    List03

    modThisWorkbook

    modfrmCheckUpdates

    modInfo

    frmSheetReference

    frmCheckUpdates

    modComm

    TSH_REESTR_MO

    modList03

    frmDateChoose

    modProv

    modList00

    modList01

    modList02