× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 07e9d6137cab09ffdc72d5938fde189f82a77fa59ad82609b92fb5f8300909ba
File name: dttcodexgigas.7e6dd06aea79614d489f4f33aa69db7d290babce
Detection ratio: 30 / 57
Analysis date: 2018-11-05 09:20:25 UTC ( 4 months, 2 weeks ago ) View latest
Antivirus Result Update
Ad-Aware Exploit.CVE-2017-11882.Gen 20181105
AhnLab-V3 OLE/Cve-2017-11882.Gen 20181105
ALYac Exploit.CVE-2017-11882.Gen 20181105
Arcabit Exploit.CVE-2017-11882.Gen 20181105
Avast Win32:ShellCode [Expl] 20181105
AVG Win32:ShellCode [Expl] 20181105
Avira (no cloud) EXP/CVE-2017-11882.Gen 20181105
BitDefender Exploit.CVE-2017-11882.Gen 20181105
ClamAV Rtf.Exploit.CVE_2017_11882-6584355-0 20181105
Cyren CVE-2017-11882.E.gen!Camelot 20181105
DrWeb Exploit.ShellCode.69 20181105
Emsisoft Exploit.CVE-2017-11882.Gen (B) 20181105
ESET-NOD32 probably a variant of Win32/Exploit.CVE-2017-11882.A 20181105
F-Secure Exploit:W97M/CVE-2017-0199.B 20181105
Fortinet MSOffice/CVE_2017_11882.A!exploit 20181105
GData Exploit.CVE-2017-11882.Gen (2x) 20181105
Ikarus Exploit.CVE-2017-11882 20181104
Kaspersky HEUR:Exploit.MSOffice.Generic 20181105
MAX malware (ai score=84) 20181105
McAfee CVE2017-11882.aw!B2EEE7E644AC 20181105
McAfee-GW-Edition CVE2017-11882.aw!B2EEE7E644AC 20181105
Microsoft Exploit:O97M/CVE-2017-11882.L 20181105
eScan Exploit.CVE-2017-11882.Gen 20181105
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn 20181105
Qihoo-360 virus.exp.21711882.d 20181105
Rising Exploit.CVE-2017-11882!1.B40D (CLASSIC) 20181105
Sophos AV Troj/RtfExp-EQ 20181105
Symantec Exp.CVE-2017-11882!g2 20181105
TACHYON Trojan-Exploit/RTF.CVE-2017-11882 20181105
ZoneAlarm by Check Point HEUR:Exploit.RTF.Agent.gen 20181105
AegisLab 20181105
Alibaba 20180921
Antiy-AVL 20181105
Avast-Mobile 20181105
Babable 20180918
Baidu 20181105
Bkav 20181102
CAT-QuickHeal 20181104
CMC 20181105
CrowdStrike Falcon (ML) 20181022
Cybereason 20180225
Cylance 20181105
eGambit 20181105
Endgame 20180730
F-Prot 20181105
Sophos ML 20180717
Jiangmin 20181105
K7AntiVirus 20181105
K7GW 20181105
Kingsoft 20181105
Malwarebytes 20181105
Palo Alto Networks (Known Signatures) 20181105
Panda 20181104
SentinelOne (Static ML) 20181011
SUPERAntiSpyware 20181031
Symantec Mobile Insight 20181030
Tencent 20181105
TheHacker 20181104
TotalDefense 20181105
TrendMicro 20181105
TrendMicro-HouseCall 20181105
Trustlook 20181105
VBA32 20181105
VIPRE 20181104
ViRobot 20181105
Webroot 20181105
Yandex 20181102
Zillya 20181102
Zoner 20181105
The file being studied is a Rich Text Format file! RTF is a proprietary document file format with published specification developed by Microsoft Corporation since 1987 for Microsoft products and for cross-platform document interchange.
Document properties
Non ascii characters
0
Embedded drawings
0
Rtf header
rtf
Read only protection
False
User protection
False
Default character set
ANSI (default)
Custom xml data properties
0
Dos stubs
0
Objects
Hypertext Markup Language (HTML) control
Embedded pictures
0
Longest hex string
8318
ExifTool file metadata
MIMEType
text/rtf

FileType
RTF

Warning
Unspecified RTF encoding. Will assume Latin

FileTypeExtension
rtf

File identification
MD5 4dae6813c2cad26d62fcaea8d9546a2d
SHA1 7e6dd06aea79614d489f4f33aa69db7d290babce
SHA256 07e9d6137cab09ffdc72d5938fde189f82a77fa59ad82609b92fb5f8300909ba
ssdeep
96:RnBgvCe5AdxoA6mle1enky2Imq91DRQB8j:7wC9dj2C1D+8j

File size 8.2 KB ( 8382 bytes )
File type Rich Text Format
Magic literal
Rich Text Format data, unknown version

TrID Rich Text Format (100.0%)
Tags
rtf exploit html-control cve-2017-11882 cve-2017-0199

VirusTotal metadata
First submission 2018-11-05 09:20:25 UTC ( 4 months, 2 weeks ago )
Last submission 2018-11-14 05:40:25 UTC ( 4 months, 1 week ago )
File names SOA.doc
dttcodexgigas.7e6dd06aea79614d489f4f33aa69db7d290babce
4dae6813c2cad26d62fcaea8d9546a2d
ExifTool file metadata
MIMEType
text/rtf

FileType
RTF

Warning
Unspecified RTF encoding. Will assume Latin

FileTypeExtension
rtf

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!