MS Office Document file analysis – 5ae1a4d05666

The file 5ae1a4d0566659885b87aab27006a6fa is a MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 175 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: —
MD5: -
Verdict: Inconclusive
File type: MS Office Document

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

176 files

OFF5ae1a4d0566659885b87aab27006a6fa

BINRoot Entry

IMG0x00023E19.svg

IMG0x0003693E.svg

EXEigfxSDK.exe

DLLwtsapi32.dll

DLLversion.dll

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #16 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #17 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #18 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #19 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #20 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #21 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #22 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #23 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #24 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #25 URIsuspect

https:huhuhuhuhuhuhu

URLs in VB Code - #26 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #27 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #28 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #29 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #30 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #31 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #32 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #33 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #34 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #35 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #36 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts36

File Structure

Artefacts36