Errors

Reason
office: invalid record header length
Reason
office: invalid record header length

General

  • Target

    JaffaCakes118_73e63c02a2be9b305e770a1cfb5166b8

  • Size

    20.0MB

  • MD5

    73e63c02a2be9b305e770a1cfb5166b8

  • SHA1

    8c8184a83ba0dea1074f768d50d864c7bfd4797e

  • SHA256

    065f3e527b8e8046efc92f372c60c9e9cc0feb5970e8a45a45e81f9828030d81

  • SHA512

    07aaa9178b7ecc39d63970cb7139289d586806fc99b642802f71b4a84dd5a25086a0ec0411e9bc56697725a5633d63f23bdbdc248eabc91ddcd67439153fc0d9

  • SSDEEP

    393216:Aq/+DzwwWgIz8dYfigOfoQ6Z70gjagAxH0xfiFzSlZ+ftB3obXtjkX:F/s9WfQYLOfV6V0wNunklwTYbXdkX

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

Files

  • JaffaCakes118_73e63c02a2be9b305e770a1cfb5166b8
    .bz2
  • sample
    .tar .pdf polyglot
  • 001e2710555613a82e94156d3ed9c289
    .pdf
  • pad.swf
  • 004e74d54dcf79c641d5cf8a615488a0
    .pdf
  • 0106fb569e87e02fc88d496064abdf19
    .js .pdf polyglot
  • 02bfe34bea55e327cfdead9cff215f33
    .pdf
  • 1.swf
  • 030423da29e1e6f4a527518126de4aeb
    .js .pdf polyglot
  • 03042cc3786dafdb941019488d4cad3e
    .pdf
  • 03546e59967af0c2dbf609013934cd07
  • 04095314d51057a13e21908de1266fc1
    .pdf
  • 049675afd5c9505b9715872d499b9389
    .pdf
  • 0700bffe83561c1e2a5156d89de68f6d
  • 0733c4e2122cdfcfdd4699a3cbdc8b40
    .pdf
  • 08da26158b76ca38e0ddb740aaf9b4ff
    .pdf
  • 0ab4a29af51b17335abbe0eb861784aa
  • 0d711f2049a6004cffe447dab78cd7e5
    .pdf
  • 0e0c3a177b898c523e8303940ae99077
    .js .pdf polyglot
  • 0e1fc785eff45ff0b140dbf61abf3eab
  • 0f24780097467c4c54f8f306346dff37
    .pdf
  • 0f5d42aa99b17eabddc19a46013b517b
    .pdf
  • 0fc9c4e1e2148912188dd913ff95149e
    .pdf
  • 100cf902ac31766f7d8a521eeb6f8d68
    .pdf
  • 10c35deb541e58b115ea2c682edb26ea
    .pdf
  • 10e15dd9b11528762c182b04f80e0a03
    .pdf
  • 116c4ad3656000b7c0908c13470d0001
    .pdf
  • 116d92f036f68d325068f3c7bbf1d535
    .pdf
  • 11dbb8d7924595e24c61eca8c9248834
    .pdf
  • 122ca0d4629ff12c3b0aa21bd18dbf08
    .pdf
  • 15a22ac5b7ed9fd640d6220dac0b4488
  • 1618d09ff580014b251794222bb0f0f9
    .pdf
  • 17b67bd445c655598875e4c9a97ba906
    .pdf
  • 194030ef77514d3cad3b23d9fa3a0160
    .pdf
  • 1b2ff9edab6d5663842d6027b2819a86
    .pdf
  • 1dd08cf849277f10cc588718c137e77b
    .pdf
  • 1fd0cd90cbd69234d07b4172bbad754d
    .pdf
  • 21f05c819712e39a7a4d089b4f31e602
    .pdf
  • 21fa925e48a4238e22fef1147f293727
    .rtf
  • 22f3e7e6f64217628f97d09cdaa1810d
    .pdf
  • 230748c2bd16ba0213b73f0fd045169d
    .pdf
  • 231fc7f1300d2e6f94bccfaddbd98ea2
    .pdf
  • 238ecf8c0aee8bfd216cf3cad5d82448
    .pdf
  • 268a0065b6ea134054dc6aea300a830d
    .pdf
  • 26cb2016442b19af37d691ec46424aea
    .pdf
  • 27cd1443a07772e6e04207dd45537eae
    .pdf
  • 289d8bba31bb2e4455f3d28b74926c1d
    .pdf
  • 28f5ed6f32f3d9b800cf41c663b6c7f4
    .chm
  • 29db2fba7975a16dbc4f3c9606432ab2
    .pdf
  • 2aaa2f62cadf2b0f72587b3dffaee669
    .pdf
  • 2bbf014a1752d92b91e3452f9a235464
    .pdf
  • 2cd0e2c020f617ec1edc4ebd489da7e7
    .pdf
  • 2eea004842a335607b612ff10418f6c6
    .rtf
  • 2f846adf7a93e94a0a809eb32f188146
    .pdf
  • 307c2068b22b968a6bd0996e7c77f1ee
    .pdf
  • 33c1b7620ac827b26496534122e0cda6
    .pdf
  • 34d8b44ccdb7c1a6885c7d11c1d87be3
    .js .pdf polyglot
  • 350924123cbf1b126f4e38335ed6660d
    .pdf
  • 357d296be75e7e3988591d9123a01177
    .js .pdf polyglot
  • 36af296c3954274f4222847814b1f63b
    .pdf
  • 398fca0465861879284ef20f8e12e063
    .pdf
  • 3a67789dc523b6d083e8c4d652c7316a
    .pdf
  • 3abe00a1d0dc816a99587f574d02b498
    .pdf
  • 3bb77dde61188077ae6b23822f135df8
    .js .pdf polyglot
  • 3f57c3d98225d04e631c09d61adbb973
    .xls windows office2003
  • 4031049fe402e8ba587583c08a25221a
    .xls windows office2003

    Sheet1

    Sheet2

    Sheet3

  • 4378bb2be0e41569bcce202f86e505f6
    .pdf
  • 43c2aad81665ddf0e585f50771a20582
    .pdf
  • 43cb55861b7fcf1dfb6968c9ef110bcc
    .pdf
  • 4407f42fa696c32ca473bead96e36aca
    .pdf
  • 44a23a54587581144b492579d67d742d
    .pdf
  • 49cfa73a76f04572d7c31f885045fa38
    .pdf
  • 4ae0c11a28edbdf132cf0eb8e823de74
    .pdf
  • 4afbc36385ed847a1a6f6a5618fb47c1
    .js .pdf polyglot
  • 4b2947d31e15ac41ea3bfd9f46f168d5
    .pdf
  • 4bb64c1da2f73da11f331a96d55d63e2
    .xls windows office2003

    Sheet1

    Sheet2

    Sheet3

  • 4f754a8ac2db2577a4ac0324985cd997
    .pdf
  • 4fcb63eee95e7bd64662c9330f3d62d4
    .pdf
  • 50b9bee0213917e52d32d82907234aeb
    .pdf
  • 511625f5fa0315b5a870029ae3338464
    .pdf
  • 51241d683dc9f24152bdd894658d72db
    .pdf
  • 51d3e2bd306495de50bfd0f2f4e19ae9
  • 535abf5702d8f3de247b5103e31150f5
    .pdf
  • 536c0afe4d655a66dccad4af9679caa9
    .pdf
  • 538582c697d3bb59d408da61279ac75b
    .pdf
  • 53c39496579bcbda962d93734552397b
    .pdf
  • 53d54ffe118642102fe626649f9ffdba
    .rtf
  • 541e9691816fecdeb59204d92e846240
    .pdf
  • 54267a90492108fb4d0894553556c155
    .rtf
  • 554e71bfc718915135125752cf66dec2
    .pdf
  • 569607bf8315d9143fe3f7d424c3fda9
    .pdf
  • 56ae500c28dd85ac4d711b16e4f2125c
    .pdf
  • 575c2db4c26b05b862ebb60c5950f14c
    .pdf
  • 5766ba4473462485e15c4efdb243cb68
    .pdf
  • 576b214a1e5b6649f6677e20315a7ea9
    .pdf
  • 5800f546b535bd2b4e505b5c9be753ff
    .doc windows office2003
  • 58d2c062fe278cd0e97964e7e6a0a3bb
    .pdf
  • 58de08c1155a775b760049dff3f5abe4
    .pdf
  • 595a9a9074e0845636a5b4c7bb1b157a
    .pdf
  • 5a0aac44ddaad1e512a0d505c217baff
    .rtf
  • 5b7541f3648cc440405179cb5c194644
    .pdf
  • 5bbdbec981b0708ea29edff2f8d78bcf
  • 5c31ef69086467c073dde69cf3298555
    .pdf
  • 5cd2b97590afb82016aa56677cf0f42e
    .pdf
  • 61baabd6fc12e01ff73ceacc07c84f9a
    .pdf
  • 6227e1594775773a182e1b631db5f6bb
    .pdf
  • 63523effac8c0bf379ca6d69bb3227ad
    .pdf
  • 64f258918c1122b89468bb0ffbaff02d
    .js .pdf polyglot
  • 6634eacd3dae03be9767ac91b71decba
    .doc windows office2003
  • 66753cadcb8bd537af50f2ae92d7627b
    .pdf
  • 6764488f739f9198381c056850bb6d9c
    .pdf
  • 67b19a04bdbd0adc3b39130a26331493
    .pdf
  • 67b4eaf0c10c4de37e094a6e7d09c8dc
    .pdf
  • 683b003e9ecfd3834a318fad65d39e34
    .pdf
  • 68fe3b0adfce215b95e55824913ff67d
    .pdf
  • 6932d141916cd95e3acaa3952c7596e4
    .pdf
  • 69e7de7b23acaff1e9417deedfae8b42
    .pdf
  • 6b568dd640cb15a8994697adf9e7a399
    .rtf
  • 6e14c7a424c2eef7f37810ff65650837
    .pdf
  • 6f70e1815fe09fad9346a45b95eeb3e6
  • 71803d893ed7d052fdb58f10da200fe9
  • 719cf2bab291da52e495b86929b7ea7d
    .pdf
  • 721601bdbec57cb103a9717eeef0bfca
    .pdf
  • 722efe25f0d973fbb684cc32da1f693e
  • 72d6d864205b0f1b32bbc9a7e5184ee7
    .pdf
  • 738af108a6edd46536492b1782589a04
    .pdf
  • 73fadb8f36e4f34a6d4719dc4ccbe666
  • 745a347637b0603a76abbcb1e8277d1c
    .pdf
  • 757ead51fce397101a675d9bcca9d08f
    .pdf
  • 75d92097d4ae109aa5d199aa97e08569
    .pdf
  • 76f7e8dc68b364abfd893f0e9340fae8
    .pdf
  • 790b4a2c03086bd1917433a5084d2068
  • 7b80f7ed7052405cdf6434ff5bc7c175
    .pdf
  • 7b9e1c1b479447506cc046a5d8219eca
    .xls windows office2003
  • 7d6e9af1018c10f1b7dfa5169a35d941
    .pdf
  • 7f73dd439572409a64bc4dd0d603aacf
    .pdf
  • 7f7413bd2a4a0f001efd0305f4f56acf
    .js .pdf polyglot
  • 80202a9c51d8544bac7ac273428dd97c
  • 80f20af63314be2e8c79d8ca99eeb713
    .pdf
  • 82a5f96d1834411a3b5af9c21ffb14a8
    .pdf
  • 82a7c8fdacca91b1bd0fdc2407674f50
    .pdf
  • 82eeda4a754bf163d406e3e205df97e9
    .pdf
  • 83220f00d3b3cde40bd3bf58c78ba899
    .pdf
  • 853027bec65b3f2434788a70d4d15d89
    .pdf
  • 872537348b6f1ef77d74f1d298978d72
    .pdf
  • 896c14bc7ff88923e35aa824ab6c72da