× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: fd55e4422ee62676fe07fd81ae90c6654b2a334c73f50a83e85304a66994847f
File name: FILEK0243534991.doc
Detection ratio: 12 / 56
Analysis date: 2019-02-14 14:09:19 UTC ( 1 month, 1 week ago ) View latest
Antivirus Result Update
Avast Script:SNH-gen [Trj] 20190214
AVG Script:SNH-gen [Trj] 20190214
Fortinet VBA/Agent.MPF!tr.dldr 20190214
GData Generic.Trojan.Agent.AKQ@susp 20190214
Ikarus Trojan-Downloader.DOC.Agent 20190214
K7AntiVirus Trojan ( 005464381 ) 20190214
K7GW Trojan ( 005464381 ) 20190214
McAfee W97M/Downloader.cqc 20190214
McAfee-GW-Edition W97M/Downloader.cqc 20190214
Symantec ISB.Downloader!gen92 20190213
ZoneAlarm by Check Point HEUR:Trojan-Downloader.Script.Generic 20190214
Zoner Probably MacroXML 20190213
Acronis 20190213
Ad-Aware 20190214
AegisLab 20190214
AhnLab-V3 20190214
Alibaba 20180921
Antiy-AVL 20190214
Arcabit 20190213
Avast-Mobile 20190214
Avira (no cloud) 20190214
Babable 20180917
Baidu 20190201
BitDefender 20190214
Bkav 20190214
CAT-QuickHeal 20190214
ClamAV 20190214
CMC 20190214
Comodo 20190214
CrowdStrike Falcon (ML) 20181023
Cybereason 20190109
Cylance 20190214
Cyren 20190214
DrWeb 20190214
eGambit 20190214
Emsisoft 20190214
Endgame 20181108
ESET-NOD32 20190214
F-Prot 20190214
F-Secure 20190214
Sophos ML 20181128
Jiangmin 20190214
Kaspersky 20190214
Kingsoft 20190214
Malwarebytes 20190214
MAX 20190214
Microsoft 20190214
eScan 20190214
NANO-Antivirus 20190214
Palo Alto Networks (Known Signatures) 20190214
Panda 20190214
Qihoo-360 20190214
Rising 20190214
SentinelOne (Static ML) 20190203
Sophos AV 20190214
SUPERAntiSpyware 20190213
Symantec Mobile Insight 20190206
TACHYON 20190214
Tencent 20190214
TheHacker 20190212
TotalDefense 20190213
Trapmine 20190123
TrendMicro 20190214
TrendMicro-HouseCall 20190214
Trustlook 20190214
VBA32 20190214
ViRobot 20190214
Webroot 20190214
Yandex 20190212
Zillya 20190213
File identification
MD5 69608a820f023f053e1e59d666a73119
SHA1 9ccddf270eeac1f0219efb5dba7cdc6a49de9cd1
SHA256 fd55e4422ee62676fe07fd81ae90c6654b2a334c73f50a83e85304a66994847f
ssdeep
6144:2Eub3gi5/meGMzSVIhl9EKRDqME4yanMjdn/NQVg+D3Do8oRtxQwvVAJTVE:2EJi9meG8SVIf51E4K14o8IuY

File size 467.3 KB ( 478469 bytes )
File type XML
Magic literal
XML document text

TrID Microsoft Office XML Flat File Format Word Document (ASCII) (65.1%)
Microsoft Office XML Flat File Format (ASCII) (31.0%)
Generic XML (ASCII) (2.3%)
HyperText Markup Language (1.4%)
Tags
xml

VirusTotal metadata
First submission 2019-02-14 14:09:19 UTC ( 1 month, 1 week ago )
Last submission 2019-02-14 23:37:52 UTC ( 1 month ago )
File names emotet_e2_fd55e4422ee62676fe07fd81ae90c6654b2a334c73f50a83e85304a66994847f_2019-02-14__141004.doc
8118028687388306916.doc
K876896446454980774.doc
DOC0761.doc
ACC018161917.doc
3445389057.doc
MY13541503480556983198.doc
DOC79593447.doc
INSTR088832920489794.doc
FILEK0243534991.doc
ExifTool file metadata
WordDocumentFontsFontPitchVal
variable

WordDocumentBodySectPRPictShapeType
#_x0000_t75

WordDocumentBodySectPRPictShapeStyle
width:468pt;height:349.5pt;visibility:visible;mso-wrap-style:square

WordDocumentDocumentPropertiesCharacters
1

WordDocumentBodySectPRPictShapeSpid
_x0000_i1025

WordDocumentStylesStyleNameVal
Normal

WordDocumentStylesStyleRPrLangBidi
AR-SA

WordDocumentBodySectPRPictShapetypeId
_x0000_t75

MIMEType
application/xml

WordDocumentStylesStyleTblPrTblCellMarTopType
dxa

WordDocumentStylesStyleRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypePathConnecttype
rect

WordDocumentBodySectSectPrPgMarRight
1440

WordDocumentShapeDefaultsShapelayoutIdmapExt
edit

WordDocumentBodySectPRPictShapetypePathExtrusionok
f

WordDocumentShapeDefaultsShapedefaultsExt
edit

WordDocumentBodySectPRPictShapeId
Picture 1

WordDocumentStylesStyleTblPrTblCellMarRightType
dxa

WordDocumentFontsFontName
Times New Roman

WordDocumentBodySectSectPrPgMarBottom
1440

WordDocumentBodySectPRPictShapetypeFormulasFEqn
if lineDrawn pixelLineWidth 0

WordDocumentStylesStyleTblPrTblCellMarTopW
0

WordDocumentFontsDefaultFontsCs
Times New Roman

WordDocumentBodySectPRPictShapetypeLockAspectratio
t

WordDocumentStylesStylePPrSpacingLine
259

WordDocumentDocSuppDataBinDataName
b_7556

WordDocumentDocPrZoomPercent
100

WordDocumentBodySectSectPrPgSzH
15840

WordDocumentFontsDefaultFontsAscii
Calibri

WordDocumentStylesStyleStyleId
Normal

WordDocumentBodySectSectPrPgSzW
12240

WordDocumentBodySectPRPictShapetypePreferrelative
t

WordDocumentStylesStylePPrSpacingAfter
160

WordDocumentOcxPresent
no

WordDocumentStylesStyleTblPrTblIndType
dxa

WordDocumentDocPrRsidsRsidRootVal
005E6EE1

WordDocumentDocumentPropertiesLastSaved
2019:02:14 12:47:00Z

WordDocumentBodySectPRPictShapetypeLockExt
edit

WordDocumentBodySectSectPrPgMarLeft
1440

WordDocumentBodySectSectPrColsSpace
720

FileType
XML

WordDocumentDocumentPropertiesPages
1

WordDocumentStylesLatentStylesLsdExceptionName
Normal

WordDocumentStylesStyleTblPrTblCellMarRightW
108

WordDocumentDocPrDefaultTabStopVal
720

WordDocumentDocumentPropertiesRevision
1

WordDocumentBodySectSectPrPgMarFooter
720

WordDocumentDocumentPropertiesTotalTime
0

WordDocumentBodySectSectPrPgMarTop
1440

WordDocumentStylesStyleUiNameVal
Table Normal

WordDocumentBodySectSectPrPgMarHeader
720

WordDocumentDocumentPropertiesParagraphs
1

WordDocumentBodySectPRRsidRPr
002A3BBA

WordDocumentBodySectPRsidR
005E6EE1

WordDocumentBodySectPRPictShapetypeStroked
f

WordDocumentBodySectPRPictShapetypeCoordsize
21600,21600

WordDocumentDocPrCharacterSpacingControlVal
DontCompress

WordDocumentEmbeddedObjPresent
no

WordDocumentStylesStyleRPrRFontsAscii
Tahoma

WordDocumentStylesVersionOfBuiltInStylenamesVal
7

WordDocumentIgnoreSubtreeVal
http://schemas.microsoft.com/office/word/2003/wordml/sp2

WordDocumentBodySectPRPictBinData
(Binary data 366950 bytes, use -b option to extract)

WordDocumentStylesStyleTblPrTblCellMarBottomType
dxa

WordDocumentFontsFontCharsetVal
00

WordDocumentDocumentPropertiesLines
1

WordDocumentStylesStyleTblPrTblCellMarBottomW
0

WordDocumentStylesLatentStylesDefLockedState
off

WordDocumentDocPrRsidsRsidVal
005A24B1

WordDocumentBodySectPRPictShapetypeFilled
f

WordDocumentBodySectPRPictShapeImagedataSrc
wordml://j4220976.l2525__0.Q932_2

WordDocumentBodySectPRPictShapetypeStrokeJoinstyle
miter

WordDocumentDocumentPropertiesCharactersWithSpaces
1

WordDocumentStylesStyleLinkVal
BalloonTextChar

WordDocumentStylesLatentStylesLatentStyleCount
375

WordDocumentDocPrAlwaysShowPlaceholderTextVal
off

WordDocumentBodySectPRPictShapetypePath
m@4@5l@4@11@9@11@9@5xe

WordDocumentDocumentPropertiesCreated
2019:02:14 12:47:00Z

WordDocumentStylesStyleRPrRFontsCs
Tahoma

WordDocumentBodySectSectPrPgMarGutter
0

WordDocumentDocPrViewVal
print

WordDocumentBodySectPRsidRDefault
00D61774

WordDocumentDocSuppDataBinData
(Binary data 83916 bytes, use -b option to extract)

WordDocumentStylesStyleTblPrTblCellMarLeftW
108

WordDocumentMacrosPresent
yes

WordDocumentFontsFontFamilyVal
Roman

WordDocumentStylesStyleRPrLangVal
EN-US

WordDocumentDocumentPropertiesWords
0

WordDocumentStylesStyleTblPrTblIndW
0

WordDocumentFontsDefaultFontsFareast
Calibri

WordDocumentStylesStyleRPrSzVal
22

FileTypeExtension
xml

WordDocumentShapeDefaultsShapelayoutExt
edit

WordDocumentBodySectPRPictShapetypePathGradientshapeok
t

WordDocumentStylesStyleRPrLangFareast
EN-US

WordDocumentShapeDefaultsShapedefaultsSpidmax
1026

WordDocumentStylesStyleBasedOnVal
Normal

WordDocumentBodySectPRPictBinDataName
wordml://j4220976.l2525__0.Q932_2

WordDocumentBodySectSectPrRsidR
005E6EE1

WordDocumentDocPrPixelsPerInchVal
120

WordDocumentDocPrIgnoreMixedContentVal
off

WordDocumentBodySectPRPictShapetypeSpt
75

WordDocumentStylesStyleRPrFontVal
Calibri

WordDocumentStylesStyleTblPrTblCellMarLeftType
dxa

WordDocumentDocPrSaveInvalidXMLVal
off

WordDocumentDocumentPropertiesVersion
16

WordDocumentStylesStyleDefault
on

WordDocumentShapeDefaultsShapelayoutIdmapData
1

WordDocumentStylesStyleType
paragraph

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!