Behavioral task
behavioral1
Sample
ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118.xls
Resource
win10v2004-20240802-en
General
-
Target
ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118
-
Size
2.1MB
-
MD5
ea04d1318ac15dd3ecee186ac5c3fa01
-
SHA1
262d488b40d733baa319be18cb36af9452a3ea96
-
SHA256
98fac6d599808748f1e6b39a1a39dab6c4e0f1f1fd6f1c480474113a4edf2129
-
SHA512
d7b84724c0669b3e3963742ae27a93fe7c77010d7c34cb792ef0a970d550dd08e75bae0cd66b0900edf80148098a4e9c0e9c245ea5841f7ffb7f488b19d2f385
-
SSDEEP
24576:6u7r/0lAnHcwZekBQ/1idmgEBzzW28RMytrD68Muhxz0wbpn6kif6HWvq:6ufM29c1wNxRbp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
ea04d1318ac15dd3ecee186ac5c3fa01_JaffaCakes118.xls windows office2003
xlsBook
modHTTPServerCaller
cHandleEvents
modInternetConnectionState
modUpd_Templ_HTTP_Request
TSH_et_union_vert
modUpdTemplMain
modInvokeHTTPServer
modUpd_Templ_Defines
modServiceModule
modUpd_Templ_Caller
TEHSHEET
TSH_et_union_hor
modGlobals
modDefine
modClassifierValidate
IMessageWindow
modScrolling
modfrmReestrMR
modRegion
List00
List01
modHyp
Wrapper
TSH_REESTR_ORG
modAnimatedFormsGlobals
AllSheetsInThisWorkbook
frmReestr
Instruction
modUpdTemplLogger
modfrmDateChoose
ListComm
ListCheck
modReestr
modfrmReestr
MessageDialogue
List02
frmRegion
frmReestrMR
List03
modThisWorkbook
modfrmCheckUpdates
modInfo
frmSheetReference
frmCheckUpdates
modComm
TSH_REESTR_MO
modList03
frmDateChoose
modProv
modList00
modList01
modList02