MS Office Document file analysis – 1321a4f71f12

This sample is a 643 KB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 42 embedded or derived files. It matches 4 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 1321a4f71f12d4422ea78481c8f5fe87d94b48007628410e8530f518d70d6707
MD5: b8180a580296fc9b0cb3c13608749a18
Verdict: Inconclusive
File type: MS Office Document · 643 KB

Cite this report: https://app.malva.re/sha256/1321a4f71f12d4422ea78481c8f5fe87d94b48007628410e8530f518d70d6707

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

658.43 KB · 658,432 B

First seen

2026-09-23 15:30 · one month ago

Last seen

2026-09-23 15:30 · one month ago

Last analysis

2026-09-23 15:30 · one month ago

Hashes

MD5 b8180a580296fc9b0cb3c13608749a18 Sha1 2265becea2753fbfdb12048cd473dac41122c3e6 Sha256 1321a4f71f12d4422ea78481c8f5fe87d94b48007628410e8530f518d70d6707 Sha384 653818889bdded94612000a3a1e2057412d75cabf43253cc65ebe69f9fd3212aeed04425341a0de226d99028a7e611f6 Sha512 d256df04bef6e90024ab1f8bf8df321a3e9ef025c7d792c915c515f029d3aafb8d00891042b6dc3fde6417c3937ca4446f7aba97e71cce6f760e7576582e4ff7 SSDeep 12288:j9LV72MTC0wRvjthAejvR6X9nGdiE6FwrOS256tQy88vn+weW5m2rzKJyQ7uLNW:j9LVHARLpgdGdiEpr056Hn+wl+M0 TLSH 52E4239C3266CE23E6C35D3E0ACA61C6E12EFD199F26D5077985730DC57273A962B203

43 files

OFFb8180a580296fc9b0cb3c13608749a18

BINRoot Entry

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8

bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>oox:xlsx>oox:media>ole:doc

Shape ole:doc>oox:xlsx>oox:media>ole:doc

4 nodes

Name	Value
Version	1.3
CreationDate	D:20260913143438
Producer	FPDF 1.53
/Producer	FPDF 1.53
/CreationDate	D:20260913143438

b8180a580296fc9b0cb3c13608749a18

Overview

Summary by MalvaGPT

Characteristics

File Structure

Information5

b8180a580296fc9b0cb3c13608749a18 (658.43 KB)

File Structure