General

  • Target

    f02bc29a970f602fc187abeee703496e_JaffaCakes118

  • Size

    241KB

  • MD5

    f02bc29a970f602fc187abeee703496e

  • SHA1

    361d64c26167d01c9c4432188748ce4ef86d5502

  • SHA256

    1e5e2198a3c2807ff4f4285d3df0f6916628de9081090a867072ef23e2e5f8ce

  • SHA512

    ded92f85182a7a7dbc2f58a4e9bf0b356175054e0ba046b95514b1dce5942438c55c74bd9183211139b76758fe622f932e1d6f06ac77105e018edeb9d79fba3f

  • SSDEEP

    3072:4vw9HXPJguq73/IKBWyJCdSu7LqvP25kSL:4vKHXPJi73wASUzvenL

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f02bc29a970f602fc187abeee703496e_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5