× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: e5066650466c3c3e97b614d8c6631a12f554cbfea3e2a8647153b4c1faa5177f
File name: ID9148980907_2019.doc
Detection ratio: 13 / 56
Analysis date: 2019-01-23 09:37:21 UTC ( 4 months ago ) View latest
Antivirus Result Update
Ad-Aware VB:Trojan.Valyria.1657 20190123
BitDefender VB:Trojan.Valyria.1657 20190123
ESET-NOD32 VBA/TrojanDownloader.Agent.MFM 20190123
F-Secure VB:Trojan.Valyria.1657 20190123
Fortinet VBA/Agent.CPC!tr.dldr 20190123
GData VB:Trojan.Valyria.1657 20190123
Ikarus Trojan-Downloader.VBA.Agent 20190123
MAX malware (ai score=83) 20190123
Microsoft Trojan:Script/Foretype.A!ml 20190123
eScan VB:Trojan.Valyria.1657 20190123
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi 20190123
Sophos AV Troj/DocDl-RMY 20190123
Zoner Probably MacroXML 20190123
Acronis 20190119
AegisLab 20190123
AhnLab-V3 20190123
Alibaba 20180921
ALYac 20190123
Antiy-AVL 20190123
Arcabit 20190123
Avast 20190123
Avast-Mobile 20190122
AVG 20190123
Avira (no cloud) 20190123
Babable 20180918
Baidu 20190123
Bkav 20190122
CAT-QuickHeal 20190123
ClamAV 20190123
CMC 20190122
Comodo 20190123
CrowdStrike Falcon (ML) 20181023
Cybereason 20190109
Cylance 20190123
Cyren 20190123
DrWeb 20190123
eGambit 20190123
Emsisoft 20190123
Endgame 20181108
F-Prot 20190123
Sophos ML 20181128
Jiangmin 20190123
K7AntiVirus 20190123
K7GW 20190123
Kaspersky 20190123
Kingsoft 20190123
Malwarebytes 20190123
McAfee 20190123
McAfee-GW-Edition 20190123
Palo Alto Networks (Known Signatures) 20190123
Panda 20190122
Qihoo-360 20190123
Rising 20190123
SentinelOne (Static ML) 20190118
SUPERAntiSpyware 20190116
Symantec 20190122
TACHYON 20190123
Tencent 20190123
TheHacker 20190118
Trapmine 20190103
TrendMicro 20190123
TrendMicro-HouseCall 20190123
Trustlook 20190123
VBA32 20190123
ViRobot 20190123
Webroot 20190123
Yandex 20190122
Zillya 20190123
ZoneAlarm by Check Point 20190123
File identification
MD5 eef66e503617b6ae990bd1a90be931f0
SHA1 89949a05d7b250a87d5e885d62ccfd934f8f00b6
SHA256 e5066650466c3c3e97b614d8c6631a12f554cbfea3e2a8647153b4c1faa5177f
ssdeep
3072:bzEWdGujL/xSu90OoiLuDKZXfwKeljR1z:vSUxUOmD+XfwLX

File size 199.0 KB ( 203737 bytes )
File type XML
Magic literal
XML document text

TrID Microsoft Office XML Flat File Format Word Document (ASCII) (65.1%)
Microsoft Office XML Flat File Format (ASCII) (31.0%)
Generic XML (ASCII) (2.3%)
HyperText Markup Language (1.4%)
Tags
xml attachment

VirusTotal metadata
First submission 2019-01-23 09:35:29 UTC ( 4 months ago )
Last submission 2019-01-23 18:05:33 UTC ( 4 months ago )
File names W301661319856459103.doc
QVQB348033393840175.doc
emotet_e2_e5066650466c3c3e97b614d8c6631a12f554cbfea3e2a8647153b4c1faa5177f_2019-01-23__093503.doc
ID9148980907_2019.doc
16442833442154982227.doc
6476244874663.doc
FILE-90520873817.doc
ExifTool file metadata
WordDocumentFontsFontPitchVal
variable

WordDocumentBodySectPRPictShapeType
#_x0000_t75

WordDocumentBodySectPRPictShapeStyle
width:468pt;height:349.5pt;visibility:visible;mso-wrap-style:square

WordDocumentDocumentPropertiesCharacters
1

WordDocumentBodySectSectPrPgMarBottom
1440

WordDocumentStylesStyleNameVal
Normal

WordDocumentStylesStyleRPrLangBidi
AR-SA

WordDocumentBodySectPRPictShapetypeId
_x0000_t75

MIMEType
application/xml

WordDocumentStylesStyleTblPrTblCellMarTopType
dxa

WordDocumentBodySectPRPictShapeSpid
_x0000_i1025

WordDocumentStylesStyleRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypePathConnecttype
rect

WordDocumentBodySectSectPrPgMarRight
1440

WordDocumentShapeDefaultsShapelayoutIdmapExt
edit

WordDocumentBodySectPRPictShapetypePathExtrusionok
f

WordDocumentShapeDefaultsShapedefaultsExt
edit

WordDocumentBodySectPRPictShapeId
Picture 1

WordDocumentStylesStyleTblPrTblCellMarRightType
dxa

WordDocumentFontsFontName
Times New Roman

WordDocumentBodySectPRPictShapetypeFormulasFEqn
if lineDrawn pixelLineWidth 0

WordDocumentStylesStyleTblPrTblCellMarTopW
0

WordDocumentFontsDefaultFontsCs
Times New Roman

WordDocumentBodySectPRPictShapetypeLockAspectratio
t

WordDocumentStylesStylePPrSpacingLine
259

WordDocumentDocSuppDataBinDataName
editdata.mso

WordDocumentDocPrZoomPercent
100

WordDocumentBodySectSectPrPgSzH
15840

WordDocumentFontsDefaultFontsAscii
Calibri

WordDocumentStylesStyleStyleId
Normal

WordDocumentBodySectSectPrPgSzW
12240

WordDocumentBodySectPRPictShapetypePreferrelative
t

WordDocumentStylesStylePPrSpacingAfter
160

WordDocumentOcxPresent
no

WordDocumentStylesStyleTblPrTblIndType
dxa

WordDocumentDocPrRsidsRsidRootVal
005E6EE1

WordDocumentDocumentPropertiesLastSaved
2019:01:23 08:21:00Z

WordDocumentBodySectPRPictShapetypeLockExt
edit

WordDocumentBodySectSectPrPgMarLeft
1440

WordDocumentBodySectSectPrColsSpace
720

FileType
XML

WordDocumentDocumentPropertiesPages
1

WordDocumentStylesLatentStylesLsdExceptionName
Normal

WordDocumentStylesStyleTblPrTblCellMarRightW
108

WordDocumentDocPrDefaultTabStopVal
720

WordDocumentDocumentPropertiesRevision
1

WordDocumentBodySectSectPrPgMarFooter
720

WordDocumentDocumentPropertiesTotalTime
0

WordDocumentBodySectSectPrPgMarTop
1440

WordDocumentStylesStyleUiNameVal
Table Normal

WordDocumentBodySectSectPrPgMarHeader
720

WordDocumentDocumentPropertiesParagraphs
1

WordDocumentBodySectPRRsidRPr
00692224

WordDocumentBodySectPRsidR
005E6EE1

WordDocumentBodySectPRPictShapetypeStroked
f

WordDocumentBodySectPRPictShapetypeCoordsize
21600,21600

WordDocumentDocPrCharacterSpacingControlVal
DontCompress

WordDocumentEmbeddedObjPresent
no

WordDocumentStylesStyleRPrRFontsAscii
Tahoma

WordDocumentStylesVersionOfBuiltInStylenamesVal
7

WordDocumentIgnoreSubtreeVal
http://schemas.microsoft.com/office/word/2003/wordml/sp2

WordDocumentBodySectPRPictBinData
(Binary data 145376 bytes, use -b option to extract)

WordDocumentStylesStyleTblPrTblCellMarBottomType
dxa

WordDocumentFontsFontCharsetVal
00

WordDocumentDocumentPropertiesLines
1

WordDocumentStylesStyleTblPrTblCellMarBottomW
0

WordDocumentStylesLatentStylesDefLockedState
off

WordDocumentDocPrRsidsRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypeFilled
f

WordDocumentBodySectPRPictShapeImagedataSrc
wordml://02000001.jpg

WordDocumentBodySectPRPictShapetypeStrokeJoinstyle
miter

WordDocumentDocumentPropertiesCharactersWithSpaces
1

WordDocumentStylesStyleLinkVal
BalloonTextChar

WordDocumentStylesLatentStylesLatentStyleCount
375

WordDocumentDocPrAlwaysShowPlaceholderTextVal
off

WordDocumentBodySectPRPictShapetypePath
m@4@5l@4@11@9@11@9@5xe

WordDocumentDocumentPropertiesCreated
2019:01:23 08:21:00Z

WordDocumentStylesStyleRPrRFontsCs
Tahoma

WordDocumentBodySectSectPrPgMarGutter
0

WordDocumentDocPrViewVal
print

WordDocumentBodySectPRsidRDefault
009740BC

WordDocumentStylesStyleTblPrTblCellMarLeftW
108

WordDocumentMacrosPresent
yes

WordDocumentFontsFontFamilyVal
Roman

WordDocumentStylesStyleRPrLangVal
EN-US

WordDocumentDocumentPropertiesWords
0

WordDocumentStylesStyleTblPrTblIndW
0

WordDocumentFontsDefaultFontsFareast
Calibri

WordDocumentStylesStyleRPrSzVal
22

FileTypeExtension
xml

WordDocumentShapeDefaultsShapelayoutExt
edit

WordDocumentBodySectPRPictShapetypePathGradientshapeok
t

WordDocumentStylesStyleRPrLangFareast
EN-US

WordDocumentShapeDefaultsShapedefaultsSpidmax
1026

WordDocumentStylesStyleBasedOnVal
Normal

WordDocumentBodySectPRPictBinDataName
wordml://02000001.jpg

WordDocumentBodySectSectPrRsidR
005E6EE1

WordDocumentDocPrPixelsPerInchVal
120

WordDocumentDocPrIgnoreMixedContentVal
off

WordDocumentBodySectPRPictShapetypeSpt
75

WordDocumentStylesStyleRPrFontVal
Calibri

WordDocumentStylesStyleTblPrTblCellMarLeftType
dxa

WordDocumentDocPrSaveInvalidXMLVal
off

WordDocumentDocumentPropertiesVersion
16

WordDocumentStylesStyleDefault
on

WordDocumentShapeDefaultsShapelayoutIdmapData
1

WordDocumentStylesStyleType
paragraph

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!