f122e237d3915e17aed7b3d82fcf390d

MS Office Document

MD5: f122e237d3915e17aed7b3d82fcf390d

Size: 3.89 MB

application/vnd.ms-office

This sample is a 3.7 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 23 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: bec3806c165c8bd4e7cab3d0a5a5bda9b453b12e15d2bb4ea7ba72f001a59c88
MD5: f122e237d3915e17aed7b3d82fcf390d
Verdict: Inconclusive
File type: MS Office Document · 3.7 MB

Cite this report: https://app.malva.re/sha256/bec3806c165c8bd4e7cab3d0a5a5bda9b453b12e15d2bb4ea7ba72f001a59c88

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

3.89 MB · 3,891,200 B

First seen

2026-10-30 13:00 · 2 days ago

Last seen

2026-10-30 13:00 · 2 days ago

Last analysis

2026-10-30 13:00 · 2 days ago

Hashes

MD5 f122e237d3915e17aed7b3d82fcf390d Sha1 9574cbd986475711a264c5405298d82dbcc4465a Sha256 bec3806c165c8bd4e7cab3d0a5a5bda9b453b12e15d2bb4ea7ba72f001a59c88 Sha384 f8f6683d52e6b0e670489b01593be1913424dbfc9a743015b9097288005c89bf1b74fe765c548014b59405120b4c9cd0 Sha512 17fcecc87cdabab2fc0d0c64e35af29d5b4c91f47d920a1cc20d453f995c59a30752e8ea0fbe93b33899eb8157dca021c9c39e6d7124e080e980e2cf6fcbc536 SSDeep 49152:CymPiRXokZMRXZt59pf4nck+gIpfMMMGGI2sNMhYVVtBBkJSb3FgtgG05:tRARpt5D0SQGGUNt99bCx TLSH 99063307BB9E12F7D4239B30541647801B75BC784363D66726943639EEBA2148FBF8E2

24 files

OFFf122e237d3915e17aed7b3d82fcf390d

BINRoot Entry

BIN䡀䈖䌧䠤

BIN䡀䌋䄱䜵

BIN䡀㬿䏲䐸䖱

BIN䡀㽿䅤䈯䠶

BIN䡀䈏䗤䕸䠨

BIN䡀䈛䌪䗶䜵

BIN䡀䕙䓲䕨䜷

BIN䡀䌍䈵䗦䕲䠼

BIN䡀䒌䓰䑲䑨䠷

BIN䡀㼿䕷䑬㭪䗤䠤

BIN䡀㼿䕷䑬㹪䒲䠯

BIN䡀㿿䏤䇬䗤䒬䠱

BIN䡀䘌䗶䐲䆊䌷䑲

EXE䌋䄱䜵㰾㴔㦩㨬䠄

Structure

EXE䌋䄱䜵䊾䒩䑯䁌䠄

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨

BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶

BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨

BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦

BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨

BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦

BINSummaryInformation

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>pe:exe

Shape ole:doc>pe:exe

2 nodes

24 files

OFFf122e237d3915e17aed7b3d82fcf390d

BINRoot Entry

No malware configuration was found at this point.

f122e237d3915e17aed7b3d82fcf390d

Overview

Summary by MalvaGPT

Characteristics

File Structure

f122e237d3915e17aed7b3d82fcf390d (3.89 MB)

File Structure