General

  • Target

    fbc1c04af9b22b51becd6234c4f878c6_JaffaCakes118

  • Size

    49KB

  • MD5

    fbc1c04af9b22b51becd6234c4f878c6

  • SHA1

    cfaa5195bb07aae751d4a0b1bdc4be97df61c251

  • SHA256

    5581840ed17acc08ad320af637b71a3b659476e651339e5fb5c71a688eddcf37

  • SHA512

    ce646b26bbc5810eae3bc0dcfd989bef5a81fe99ac06dc63962501010740d852ebe55567df474809889e2d5575e460fd60e5c6b175da0aefcb794396ba39924e

  • SSDEEP

    768:mI4rnWxzRZvZvqSrj021WsVSr0oHBrdHIo/XKCYNsN/7:mI4ryZvZvd0jLIoHMovKCYGN/7

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • fbc1c04af9b22b51becd6234c4f878c6_JaffaCakes118
    .doc .vbs windows office2003 polyglot

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3

    Sheet4

    Module1

    Module2