× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: b7d000a0a971b3eb272b21db87479fa3a3a33c039d0913023a8d1d2a25dd4c76
File name: db.xls
Detection ratio: 0 / 55
Analysis date: 2016-01-11 20:03:01 UTC ( 3 years, 4 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160111
AegisLab 20160111
Yandex 20160111
AhnLab-V3 20160111
Alibaba 20160111
ALYac 20160111
Antiy-AVL 20160111
Arcabit 20160111
Avast 20160111
AVG 20160111
Avira (no cloud) 20160111
AVware 20160111
Baidu-International 20160111
BitDefender 20160111
Bkav 20160111
ByteHero 20160111
CAT-QuickHeal 20160111
ClamAV 20160110
CMC 20160111
Comodo 20160111
Cyren 20160111
DrWeb 20160111
Emsisoft 20160111
ESET-NOD32 20160111
F-Prot 20160111
F-Secure 20160111
Fortinet 20160111
GData 20160111
Ikarus 20160111
Jiangmin 20160111
K7AntiVirus 20160111
K7GW 20160111
Kaspersky 20160111
Malwarebytes 20160111
McAfee 20160111
McAfee-GW-Edition 20160111
Microsoft 20160111
eScan 20160111
NANO-Antivirus 20160111
nProtect 20160111
Panda 20160111
Qihoo-360 20160111
Rising 20160111
Sophos AV 20160111
SUPERAntiSpyware 20160111
Symantec 20160111
Tencent 20160111
TheHacker 20160107
TrendMicro 20160111
TrendMicro-HouseCall 20160111
VBA32 20160111
VIPRE 20160111
ViRobot 20160111
Zillya 20160111
Zoner 20160111
The file being studied follows the Compound Document File format! More specifically, it is a MS Excel Spreadsheet file.
Commonly abused properties
The studied file makes use of macros, a macro is a series of commands and instructions that you group together as a single command to accomplish a task automatically. Macros are often abused to perform malicious tasks when working with a document.
Summary
last_author
testuser
creation_datetime
2016-01-11 20:44:51
author
testuser
last_saved
2016-01-11 20:48:29
application_name
Microsoft Excel
code_page
Latin I
Document summary
version
1048576
code_page
Latin I
OLE Streams
name
Root Entry
clsid
00020820-0000-0000-c000-000000000046
type_literal
root
clsid_literal
MS Excel
sid
0
size
5696
type_literal
stream
size
107
name
\x01CompObj
sid
12
type_literal
stream
size
244
name
\x05DocumentSummaryInformation
sid
11
type_literal
stream
size
216
name
\x05SummaryInformation
sid
10
type_literal
stream
size
15616
name
Workbook
sid
1
type_literal
stream
size
421
name
_VBA_PROJECT_CUR/PROJECT
sid
9
type_literal
stream
size
62
name
_VBA_PROJECT_CUR/PROJECTwm
sid
8
type_literal
stream
size
949599
type
macro
name
_VBA_PROJECT_CUR/VBA/Sheet1
sid
5
type_literal
stream
size
985
type
macro (only attributes)
name
_VBA_PROJECT_CUR/VBA/ThisWorkbook
sid
4
type_literal
stream
size
2889
name
_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
sid
6
type_literal
stream
size
524
name
_VBA_PROJECT_CUR/VBA/dir
sid
7
Macros and VBA code streams
[+] Sheet1.cls _VBA_PROJECT_CUR/VBA/Sheet1 666569 bytes
ExifTool file metadata
MIMEType
application/vnd.ms-excel

CompObjUserTypeLen
31

CompObjUserType
Microsoft Excel 2003 Worksheet

ModifyDate
2016:01:11 19:48:29

TitleOfParts
Sheet1

SharedDoc
No

Author
testuser

FileType
XLS

AppVersion
16.0

LinksUpToDate
No

ScaleCrop
No

LastModifiedBy
testuser

HeadingPairs
Worksheets, 1

FileTypeExtension
xls

HyperlinksChanged
No

CreateDate
2016:01:11 19:44:51

Security
None

CodePage
Windows Latin 1 (Western European)

Software
Microsoft Excel

File identification
MD5 bb7012eda9044352e7aa36750009bc74
SHA1 194208c2f9b47a0e0df5d3e99be97c2301e4b23c
SHA256 b7d000a0a971b3eb272b21db87479fa3a3a33c039d0913023a8d1d2a25dd4c76
ssdeep
24576:BGlroPeNfjORVsIhWcmu9t0w1FOtci0YZRbrWeVDkOWWAuQu+:BGlroPeNfjORVsIhWcmu9t0w1FOtci0X

File size 959.5 KB ( 982528 bytes )
File type MS Excel Spreadsheet
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.3, Code page: 1252, Author: testuser, Last Saved By: testuser, Name of Creating Application: Microsoft Excel, Create Time/Date: Sun Jan 10 19:44:51 2016, Last Saved Time/Date: Sun Jan 10 19:48:29 2016, Security: 0

TrID Microsoft Excel sheet (48.0%)
Microsoft Excel sheet (alternate) (39.2%)
Generic OLE2 / Multistream Compound File (12.8%)
Tags
macros xls

VirusTotal metadata
First submission 2016-01-11 20:03:01 UTC ( 3 years, 4 months ago )
Last submission 2016-01-11 20:03:01 UTC ( 3 years, 4 months ago )
File names db.xls
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!