Malicious
Malicious

emo.doc

MS Office Document
|
MD5: 3079af4d01ee6ec51bd3d9911da7e23f
|
Size: 210.43 KB
|
application/vnd.ms-office

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
3079af4d01ee6ec51bd3d9911da7e23f
Sha1
3ea711d020b52fb0490c359462451d4edd471e33
Sha256
c578a9fc241658517a7346a2a60236c84f0bb4919b857db226150aab4093451e
Sha384
9148b013b51eb4c80c80a078641b955a63d2bc39928d30f452b97424b186dd5068d3231981ebbb73c8bcefe62ad3ec29
Sha512
4bfd70a75f7dc51439d6bd0a4ec083ca9ced847de7cdf242e6583b0c5c71ebba4df6d5c7781ecfe6213fce8b0f6446b6630d353c2038e6687cc18a559d537535
SSDeep
3072:evt3BDbKRPJivKie6B/w2yiWydh+bRevf1+l:evdlbKRPJiP/w2PCx
TLSH
F8243946B248DA4EF6C974F905C1A7B21281BD05991EF1CE6E4E3B3E9DFA34CA347241
File Structure
emo.doc
Malicious
[Repaired @0x00021946]
Malicious
.
Malicious
Root Entry
Malicious
1Table
Malicious
[Repaired @0x00000746]
Malicious
[Content_Types].xml
_rels
.rels
theme
theme
themeManager.xml
theme1.xml
_rels
themeManager.xml.rels
Macros
VBA
dir
_VBA_PROJECT
Get4ipjzmjfvp

Get4ipjzmjfvp

[Stored VBA]
[Stored VBA].deobfuscated.vbs
[PCode]
[Decompiled VBA]
[Decompiled VBA].deobfuscated.vbs
Dw75ayd2hpcab6

Dw75ayd2hpcab6

[Stored VBA]
[Stored VBA].deobfuscated.vbs
[PCode]
[Decompiled VBA]
[Decompiled VBA].deobfuscated.vbs
Rk3572j7tam4v8

Rk3572j7tam4v8

[Stored VBA]
[Stored VBA].deobfuscated.vbs
[PCode]
PROJECT
PROJECTwm
Get4ipjzmjfvp
f
o
CompObj
VBFrame
CompObj
WordDocument
SummaryInformation
DocumentSummaryInformation
emo.doc (210.43 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙