0893b586f796299b3edf5250b9ba23f8_JaffaCakes118

Reason

office: non-rc4 encrypted document not supported

General

Target

0893b586f796299b3edf5250b9ba23f8_JaffaCakes118
Size

25KB
MD5

0893b586f796299b3edf5250b9ba23f8
SHA1

991292ed674cab14f91377d695190556b53d3bcb
SHA256

06d46d601a44c4c0b370e05c100b0bf36e86a5f97904e7f41eacbfd5c9c2ca41
SHA512

b9950bdb9e0f850fce223f765aeb246ec7433a924742e94b06b10101ebabd2ceee71fb82c7270128ce2942b9d17eb9e7a8f8cd83d176d2bd03706b2ee5363256
SSDEEP

384:nSpa3oIjOfHCTUnQ+hFqvQErDF02gAfhmM:lXOqTUnQXfLb

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action