× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: fe7ca42ee57cedad4e539a01a1c38e22f3a4edc197d95237e056af02f252c739
File name: design.xls
Detection ratio: 20 / 56
Analysis date: 2017-04-18 14:08:03 UTC ( 1 year, 2 months ago )
Antivirus Result Update
Ad-Aware Trojan.GenericKD.4681494 20170418
ALYac Trojan.GenericKD.4681494 20170418
Arcabit HEUR.VBA.Trojan.e 20170418
Avast VBA:Downloader-EQM [Trj] 20170418
BitDefender Trojan.GenericKD.4681494 20170418
ClamAV Xls.Dropper.Agent-6010692-0 20170418
DrWeb W97M.Dropper.49 20170418
Emsisoft Trojan.GenericKD.4681494 (B) 20170418
ESET-NOD32 VBA/TrojanDownloader.Agent.CUC 20170418
F-Secure Trojan.GenericKD.4681494 20170418
Fortinet WM/Agent.BGF!tr 20170418
GData Trojan.GenericKD.4681494 20170418
Ikarus Trojan-Downloader.VBA.Agent 20170418
Kaspersky HEUR:Trojan.Script.Agent.gen 20170418
eScan Trojan.GenericKD.4681494 20170418
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi 20170418
Symantec Trojan.Mdropper 20170418
Tencent Win32.Trojan-downloader.Agent.Tapi 20170418
TrendMicro-HouseCall Suspicious_GEN.F47V0309 20170418
ZoneAlarm by Check Point HEUR:Trojan.Script.Agent.gen 20170418
AegisLab 20170418
AhnLab-V3 20170418
Alibaba 20170418
Antiy-AVL 20170418
AVG 20170418
Avira (no cloud) 20170418
AVware 20170418
Baidu 20170418
Bkav 20170418
CAT-QuickHeal 20170418
CMC 20170418
Comodo 20170418
CrowdStrike Falcon (ML) 20170130
Cyren 20170418
Endgame 20170413
F-Prot 20170418
Sophos ML 20170413
Jiangmin 20170418
K7AntiVirus 20170418
K7GW 20170418
Kingsoft 20170418
Malwarebytes 20170418
McAfee 20170418
McAfee-GW-Edition 20170418
Microsoft 20170418
nProtect 20170418
Palo Alto Networks (Known Signatures) 20170418
Panda 20170418
Qihoo-360 20170418
Rising None
SentinelOne (Static ML) 20170330
Sophos AV 20170418
SUPERAntiSpyware 20170418
Symantec Mobile Insight 20170414
TheHacker 20170416
TrendMicro 20170418
Trustlook 20170418
VBA32 20170418
VIPRE 20170418
ViRobot 20170418
Webroot 20170418
WhiteArmor 20170409
Yandex 20170417
Zillya 20170418
Zoner 20170418
The file being studied follows the Compound Document File format! More specifically, it is a MS Excel Spreadsheet file.
Summary
last_author
1
creation_datetime
2013-02-05 11:04:55
last_saved
2017-03-07 17:34:51
application_name
Microsoft Excel
code_page
Cyrillic
Document summary
version
917504
company
*
code_page
Cyrillic
OLE Streams
name
Root Entry
clsid
00020820-0000-0000-c000-000000000046
type_literal
root
clsid_literal
MS Excel
sid
0
size
8128
type_literal
stream
size
102
name
\x01CompObj
sid
13
type_literal
stream
size
676
name
\x05DocumentSummaryInformation
sid
12
type_literal
stream
size
180
name
\x05SummaryInformation
sid
11
type_literal
stream
size
408761
name
Workbook
sid
1
type_literal
stream
size
624
name
_VBA_PROJECT_CUR/PROJECT
sid
9
type_literal
stream
size
65
name
_VBA_PROJECT_CUR/PROJECTwm
sid
10
type_literal
stream
size
3394
name
_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
sid
8
type_literal
stream
size
783
name
_VBA_PROJECT_CUR/VBA/dir
sid
4
type_literal
stream
size
976
type
macro (only attributes)
name
_VBA_PROJECT_CUR/VBA/\u041b\u0438\u0441\u04421
sid
5
type_literal
stream
size
976
type
macro (only attributes)
name
_VBA_PROJECT_CUR/VBA/\u041b\u0438\u0441\u04422
sid
6
type_literal
stream
size
4339
type
macro
name
_VBA_PROJECT_CUR/VBA/\u042d\u0442\u0430\u041a\u043d\u0438\u0433\u0430
sid
7
ExifTool file metadata
MIMEType
application/vnd.ms-excel

CompObjUserTypeLen
26

CompObjUserType
???? Microsoft Excel 2003

Company
*

ModifyDate
2017:03:07 16:34:51

TitleOfParts
Total, Warning, Total!bookmark0, Total!bookmark1

SharedDoc
No

FileType
XLS

AppVersion
14.0

LinksUpToDate
No

ScaleCrop
No

LastModifiedBy
1

HeadingPairs
, 2, , 2

Hyperlinks
https://support.office.com/en-us/article/Record-or-run-a-macro-cd56fb86-d8b2-475c-ba39-9728389feeeb

FileTypeExtension
xls

HyperlinksChanged
No

CreateDate
2013:02:05 10:04:55

Security
None

CodePage
Windows Cyrillic

Software
Microsoft Excel

File identification
MD5 5ec6eeefdb2a49a7648bb6d59610583a
SHA1 bf59ed2ead78682e39f477dd60db9bb67c8467ec
SHA256 fe7ca42ee57cedad4e539a01a1c38e22f3a4edc197d95237e056af02f252c739
ssdeep
6144:x7uDphYHceXVhca+fMHLty/x2zZ8kpTIsxSjKu5EGhNns7UfDtdwDZVonV+z6GRU:VxSx7h54UrtyDZmn7yty1qzbh/Sqmr

File size 418.5 KB ( 428544 bytes )
File type MS Excel Spreadsheet
Magic literal
CDF V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1251, Last Saved By: 1, Name of Creating Application: Microsoft Excel, Create Time/Date: Mon Feb 04 10:04:55 2013, Last Saved Time/Date: Mon Mar 06 16:34:51 2017, Security: 0

TrID Microsoft Excel sheet (48.0%)
Microsoft Excel sheet (alternate) (39.2%)
Generic OLE2 / Multistream Compound File (12.8%)
Tags
xls

VirusTotal metadata
First submission 2017-03-08 21:38:00 UTC ( 1 year, 3 months ago )
Last submission 2017-03-08 21:39:23 UTC ( 1 year, 3 months ago )
File names design.xls
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!