General

  • Target

    f5aa2ac6bc8ac41f13b6b17556a2f752_JaffaCakes118

  • Size

    56KB

  • MD5

    f5aa2ac6bc8ac41f13b6b17556a2f752

  • SHA1

    b3380bcf2323e453a14ecf73b044bf665e28e9c5

  • SHA256

    14c68286b43c90ea97c1fabc3cb08e4ca891ffebc94329961800b2ed2fe0e188

  • SHA512

    96d0048c38ece112f2444a7914a90ae564ed0652575022d5a802a97b78a9c6030b1b1918276bb1f50c630791f1a22e53d7d91e35c88fb3fceb87f0a52e7a33bc

  • SSDEEP

    1536:t26v9zOR4qgAsyAmhKKyFMfsZgKliSDMWaiKCYCu4/:3zORpUchKKyFMfsZgKliSDb73YCu4

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f5aa2ac6bc8ac41f13b6b17556a2f752_JaffaCakes118
    .doc .vbs windows office2003 polyglot

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3

    Sheet4

    Module1

    Module2