General

  • Target

    fbd98de6b374a5825bfbd1dade6ff28a_JaffaCakes118

  • Size

    239KB

  • MD5

    fbd98de6b374a5825bfbd1dade6ff28a

  • SHA1

    378152b1ae5f508b12a2a9249a11441f3f66d5ec

  • SHA256

    f822ed63be422286f6716991714e80b7f3a76a69a57f2199f14d344815cfd7f4

  • SHA512

    305c5e8aad59f573457b81df3ee7c4127a5a88937569b01ded3555b2a3119bf99b0f6f8ffd222c1388c483fdcf95268bff69b524d89ba1a07c0f175fc1a4bc4c

  • SSDEEP

    1536:LterU1wDv/6MaETOgnHJcIKBC5bvzYyHrTPGyXK/dRYfAA2U55oS+1YllMx71:L/wDvWETOgnHJcIKBs7V4dSfl2SKa6

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • fbd98de6b374a5825bfbd1dade6ff28a_JaffaCakes118
    .doc .eml office polyglot

    ThisDocument

    UserForm1

    UserForm2

    UserForm3

    UserForm4

    UserForm5