× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: e352e213123c33984d78f5bacb26f22b160ea996871901432db028cbb2aea127
File name: a6dea088c9e2c9191e4c2fc4ece7b7b7bd3f034f444362d35c8765f6ec4bd279....
Detection ratio: 0 / 54
Analysis date: 2017-05-19 03:22:45 UTC ( 1 week, 4 days ago )
Antivirus Result Update
Ad-Aware 20170519
AegisLab 20170519
AhnLab-V3 20170519
Alibaba 20170518
ALYac 20170519
Antiy-AVL 20170519
Arcabit 20170519
Avast 20170519
AVG 20170518
Avira (no cloud) 20170519
AVware 20170519
Baidu 20170503
BitDefender 20170519
Bkav 20170518
CAT-QuickHeal 20170518
ClamAV 20170519
CMC 20170518
Comodo 20170519
CrowdStrike Falcon (ML) 20170130
Cyren 20170519
DrWeb 20170519
Emsisoft 20170519
Endgame 20170515
ESET-NOD32 20170519
F-Prot 20170519
F-Secure 20170519
Fortinet 20170519
GData 20170519
Ikarus 20170518
Invincea 20170516
Jiangmin 20170519
K7AntiVirus 20170518
K7GW 20170518
Kaspersky 20170519
Kingsoft 20170519
Malwarebytes 20170519
McAfee 20170519
McAfee-GW-Edition 20170518
Microsoft 20170519
eScan 20170519
NANO-Antivirus 20170518
nProtect 20170519
Palo Alto Networks (Known Signatures) 20170519
Panda 20170518
Qihoo-360 20170519
Rising 20170516
SentinelOne (Static ML) 20170516
Sophos 20170519
SUPERAntiSpyware 20170519
Symantec 20170518
Symantec Mobile Insight 20170518
Tencent 20170519
TheHacker 20170516
Trustlook 20170519
VBA32 20170518
VIPRE 20170519
ViRobot 20170519
Webroot 20170519
WhiteArmor 20170517
Yandex 20170518
Zillya 20170518
ZoneAlarm by Check Point 20170519
Zoner 20170519
The file being studied follows the Compound Document File format! More specifically, it is a MS Word Document file.
Summary
last_author
RCE
creation_datetime
2015-07-28 13:10:00
template
Normal
author
RCE
page_count
1
last_saved
2015-07-28 13:10:00
word_count
1
revision_number
2
application_name
Microsoft Office Word
character_count
7
code_page
Latin I
Document summary
line_count
1
characters_with_spaces
7
version
983040
paragraph_count
1
code_page
Latin I
OLE Streams
name
Root Entry
clsid
00020906-0000-0000-c000-000000000046
type_literal
root
clsid_literal
MS Word
sid
0
size
128
type_literal
stream
size
114
name
\x01CompObj
sid
5
type_literal
stream
size
4096
name
\x05DocumentSummaryInformation
sid
4
type_literal
stream
size
4096
name
\x05SummaryInformation
sid
3
type_literal
stream
size
6838
name
1Table
sid
1
type_literal
stream
size
4096
name
WordDocument
sid
2
ExifTool file metadata
SharedDoc
No

Author
RCE

CodePage
Windows Latin 1 (Western European)

LinksUpToDate
No

LastModifiedBy
RCE

HeadingPairs
Title, 1

Template
Normal

CharCountWithSpaces
7

CreateDate
2015:07:28 12:10:00

CompObjUserType
Microsoft Word 97-2003 Document

ModifyDate
2015:07:28 12:10:00

HyperlinksChanged
No

Characters
7

ScaleCrop
No

RevisionNumber
2

MIMEType
application/msword

Words
1

FileType
DOC

Lines
1

AppVersion
15.0

Security
None

Software
Microsoft Office Word

TotalEditTime
0

Pages
1

CompObjUserTypeLen
32

FileTypeExtension
doc

Paragraphs
1

File identification
MD5 15b5ab180ab245057d8cd4fafc63febc
SHA1 c744449f027da69ead0a25a881f029268a47b3c5
SHA256 e352e213123c33984d78f5bacb26f22b160ea996871901432db028cbb2aea127
ssdeep
192:wCu3NslLZEvA+6/6rrILd/Kf3HO8tt7q7:wDq8iSUR/8dt

File size 371.8 KB ( 380705 bytes )
File type MS Word Document
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: RCE, Template: Normal, Last Saved By: RCE, Revision Number: 2, Name of Creating Application: Microsoft Office Word, Create Time/Date: Mon Jul 27 12:10:00 2015, Last Saved Time/Date: Mon Jul 27 12:10:00 2015, Number of Pages: 1, Number of Words: 1, Number of Characters: 7, Security: 0

TrID Microsoft Word document (54.2%)
Microsoft Word document (old ver.) (32.2%)
Generic OLE2 / Multistream Compound File (13.5%)
Tags
doc

VirusTotal metadata
First submission 2015-08-16 00:12:14 UTC ( 1 year, 9 months ago )
Last submission 2017-05-19 03:22:45 UTC ( 1 week, 4 days ago )
File names a6dea088c9e2c9191e4c2fc4ece7b7b7bd3f034f444362d35c8765f6ec4bd279.bin.doc
mal.rtf
a6dea088c9e2c9191e4c2fc4ece7b7b7bd3f034f444362d35c8765f6ec4bd279
a6dea088c9e2c9191e4c2fc4ece7b7b7bd3f034f444362d35c8765f6ec4bd279.doc
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!