9a40f0220ccda7ef672a01d23530be85

MS Office Document

MD5: 9a40f0220ccda7ef672a01d23530be85

Size: 1.57 MB

application/vnd.ms-office

This sample is a 1.5 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 244 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: d30b8ea598dd7c0289188b2ee9b7fa9cae513da42a92f9a3f60d87629108bda1
MD5: 9a40f0220ccda7ef672a01d23530be85
Verdict: Inconclusive
File type: MS Office Document · 1.5 MB

Cite this report: https://app.malva.re/sha256/d30b8ea598dd7c0289188b2ee9b7fa9cae513da42a92f9a3f60d87629108bda1

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

1.57 MB · 1,568,768 B

First seen

2026-10-08 14:45 · 23 days ago

Last seen

2026-10-08 14:45 · 23 days ago

Last analysis

2026-10-08 14:45 · 23 days ago

Hashes

MD5 9a40f0220ccda7ef672a01d23530be85 Sha1 6649de27971ba3c5f0b4e1c4573c7d31f41ebbc6 Sha256 d30b8ea598dd7c0289188b2ee9b7fa9cae513da42a92f9a3f60d87629108bda1 Sha384 e50e615ca59456cdcd0634bea1318409c0f07be363ee949004140c0de77a191ac19f74b35877820bfe4d12a733da29cf Sha512 5d8cad2fec8e80c72f5db43f8e50b2efe6a8a3247f0025bebbd4a415f09d40baf369a08b14d37d342f46ebcdf9eba4be2118aac42b590477c4b0394786988a45 SSDeep 24576:+ZPlmF0uwTKh56Z5vePu/DVeL1pVjeODnUUGGu/aYmQurhwQUvG:Emh69eWbVypVCkgGu/aYmn1gG TLSH 5C75012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773

244 files

OFF9a40f0220ccda7ef672a01d23530be85

BINRoot Entry

BIN䡀䆒䑲

BIN䡀䌏䈯

BIN䡀䈖䌧䠤

BIN䡀䌋䄱䜵

BIN䡀䕎䒵䠵

BIN䡀㬿䏲䐸䖱

BIN䡀㽿䅤䈯䠶

BIN䡀䈏䗤䕸䠨

BIN䡀䈛䌪䗶䜵

BIN䡀䓞䕪䇤䠨

BIN䡀䕙䓲䕨䜷

BIN䈍䄩䏸䞷䄦䠥

DLLScreenConnect.Client.dll

Structure

BIN.Net Resources

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png

IMGScreenConnect.Properties.CommandDockControlPanel.png

IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png

IMGScreenConnect.Properties.ControlPanelView.png

IMGScreenConnect.Properties.ControlPanelView.png-preview.png

IMGScreenConnect.Properties.ControlPanelStatus.png

IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png

IMGScreenConnect.Properties.ControlPanelToolbox.png

IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png

IMGScreenConnect.Properties.ControlPanelParticipants.png

IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png

IMGScreenConnect.Properties.ControlPanelMessages.png

IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png

IMGScreenConnect.Properties.CommandOpenFolder.png

IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png

IMGScreenConnect.Properties.CommandSendMessage.png

IMGScreenConnect.Properties.CommandSendMessage.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png

IMGScreenConnect.Properties.CommandVideoRecord.png

IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png

IMGScreenConnect.Properties.CommandVideoPause.png

IMGScreenConnect.Properties.CommandVideoPause.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png

IMGScreenConnect.Properties.CommandChangeFolder.png

IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png

IMGScreenConnect.Properties.CommandVideoStop.png

IMGScreenConnect.Properties.CommandVideoStop.png-preview.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png

IMGScreenConnect.Properties.CommandSendFiles.png

IMGScreenConnect.Properties.CommandSendFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFiles.png

IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFolder.png

IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendFolder.png

IMGScreenConnect.Properties.CommandSendFolder.png-preview.png

IMGScreenConnect.Properties.ShareMask.png

IMGScreenConnect.Properties.ShareMask.png-preview.png

IMGScreenConnect.Properties.ShareGlyph.png

IMGScreenConnect.Properties.ShareGlyph.png-preview.png

IMGScreenConnect.Properties.DropDownGlyph.png

IMGScreenConnect.Properties.DropDownGlyph.png-preview.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png

IMGScreenConnect.Properties.ParticipantRequesting.png

IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png

IMGScreenConnect.Properties.ControlPanelShare.png

IMGScreenConnect.Properties.ControlPanelShare.png-preview.png

IMGScreenConnect.Properties.ParticipantSendingInput.png

IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png

IMGScreenConnect.Properties.ParticipantGuest.png

IMGScreenConnect.Properties.ParticipantGuest.png-preview.png

IMGScreenConnect.Properties.ParticipantHost.png

IMGScreenConnect.Properties.ParticipantHost.png-preview.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png

IMGScreenConnect.Properties.ControlPanelSound.png

IMGScreenConnect.Properties.ControlPanelSound.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakers.png

IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png

IMGScreenConnect.Properties.ParticipantAnnotating.png

IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png

IMGScreenConnect.Properties.ControlPanelHelper.png

IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png

IMGScreenConnect.Properties.StatusGlyphMask.png

IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png

CURScreenConnect.Properties.Lasso.cur

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.ClientService.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

Structure

BIN.Net Resources

DLLScreenConnect.Properties.libz.x64.dll

Structure

DLLScreenConnect.Properties.libz.x86.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1036

DLLScreenConnect.Properties.sclzma.x64.dll

Structure

DLLScreenConnect.Properties.sclzma.x86.dll

Structure

DLLScreenConnect.Properties.libwebp.x64.dll

Structure

DLLScreenConnect.Properties.libwebp.x86.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

EXEScreenConnect.WindowsClient.exe

Structure

P7B[Authenticode]_5d6205b9.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

BINapp.config

BINClient.en-US.resources

BINClient.Override.en-US.resources

BINClient.Override.resources

BINClient.resources

EXE䌋䄱䜵䀾䛬㪌

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

BIN䡀䈛㵪䆲䗤䕲

BIN䡀䌍䈵䗦䕲䠼

BIN䡀䒌䓰䑲䑨䠷

BIN䡀䓊㼳䄨䆵䠫

BIN䡀㼿䕷䑬㭪䗤䠤

BIN䡀㼿䕷䑬㹪䒲䠯

BIN䡀㿿䏤䇬䗤䒬䠱

BIN䡀䕌䄨䈷䒏䇯䕨

BIN䡀䘌䗶䐲䆊䌷䑲

BIN䆒䑲㭾䉨䘤䗯䆒䑲

BIN䡀䈜䘦䈵䅘䈭䗦䠶

BIN䡀䈜䙵䆬㬨䑲䌩䠪

BIN䡀䈜䙵䆬㬨䑲䕷䏲

BIN䡀䈜䙵䆬㲨䖱䄷䏯

BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱

BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨

BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶

BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨

BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦

BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨

BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦

EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵

Structure

DLLScreenConnect.Core.dll

BINCustomAction.config

BINOverlay_7d669e13.bin

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

BINSummaryInformation

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLMicrosoft.Deployment.WindowsInstaller.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BIN.Net Resources

BINMicrosoft.Deployment.WindowsInstaller.Errors.resources

BINCustomAction.config

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 13 STICH kept: 3secondary ignored: 10

bin 9img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path ole:doc>bin>pe:dll>pe:dll

Shape ole:doc>bin>pe:dll>pe:dll

4 nodes

Path ole:doc>pe:dll>pe:dll

Shape ole:doc>pe:dll>pe:dll

3 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

244 files

OFF9a40f0220ccda7ef672a01d23530be85

BINRoot Entry

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

DLLMicrosoft.Deployment.WindowsInstaller.dll

BINCustomAction.config

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

9a40f0220ccda7ef672a01d23530be85 › ScreenConnect.Client.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

9a40f0220ccda7ef672a01d23530be85

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts1

9a40f0220ccda7ef672a01d23530be85 (1.57 MB)

File Structure

Artefacts1