Submission Summary:

 

Technical Details:

 

File System Modifications

#Filename(s)File SizeFile Hash
1 %Temp%\docProps\app.xml 706 bytes MD5: 0x40C876CA9D0A6057B714AE0F2E4391CB
SHA-1: 0xE1A042E7D16F35C72CD80D65053C5CFC0F6DCDD6
2 %Temp%\docProps\core.xml 645 bytes MD5: 0x882DCD1379A53A3396BAFC68177231EC
SHA-1: 0xB8E8A4FA41F699D3300D13870008817C6100E709
3 %Temp%\word\document.xml 2,046 bytes MD5: 0xC2C97C6AB97B562512B24C702448F146
SHA-1: 0x3DC710E05F17DF17E37D2D13DF146FEA8591377E
4 %Temp%\word\embeddings\oleObject1.bin 4,608 bytes MD5: 0x2A07BABD3870856163A32018D373296A
SHA-1: 0x510C114DE5E831EEBCD0E3C639F5DB31AD3966C5
5 %Temp%\word\fontTable.xml 1,031 bytes MD5: 0xA315E84B586E81BAF3E0AA5A0C398F03
SHA-1: 0xBF6BE0E78BE8763216188DE129EB2B147A09CE31
6 %Temp%\word\media\image1.emf 8,872 bytes MD5: 0x5CE2B3A2A12D4005B404CCAE48EE9DE7
SHA-1: 0x52BCB35E3EEE4934A5CA3DFE205CB493C26F3B76
7 %Temp%\word\settings.xml 1,566 bytes MD5: 0x755D66FEA97B4266DC4ED4D45A2EACE2
SHA-1: 0xC6AEA0EBCA9F7AD9AB86BDBCB9B3D5B8692D377F
8 %Temp%\word\styles.xml 14,840 bytes MD5: 0xDD8317EE4FC8A60CF3E3AA3EF21E53F9
SHA-1: 0x160263B77944C6941D389138D416A55F8630D6C0
9 %Temp%\word\theme\theme1.xml 6,992 bytes MD5: 0x9D84374CAF9C73EC77677AFD23CB7B22
SHA-1: 0x69E776972DA0EE9AD814C34CF720F5D3C0E1F901
10 %Temp%\word\webSettings.xml 260 bytes MD5: 0x15065D2DE3EDDBB09D84337A09FD7985
SHA-1: 0x96C2694148B741C4E24D5BC105FEBE85B5C037FA
11 %Temp%\word\_rels\document.xml.rels 1,094 bytes MD5: 0x1637B64BACA29C701F91F800DC7A53E3
SHA-1: 0x5E523707D95242CF658EE0ED6D2884D0B9B0EF4E
12 %Temp%\[Content_Types].xml 1,460 bytes MD5: 0xFECA73ACFE6227CF2C04052009B6F801
SHA-1: 0x38FB427B981B0E18A70224E02D73CB60EF569F3A
13 %Temp%\_rels\.rels 590 bytes MD5: 0x77BF61733A633EA617A4DB76EF769A4D
SHA-1: 0x9D7ABF0EE4EFFCECAD80C8BBFB276079A05B4342
14 [file and pathname of the sample #1] 14,530 bytes MD5: 0x02ED8ED0DD0225C4220AE5B2C42804A9
SHA-1: 0x481725C5F7F794D424049140E3655D53FD7F44AD

 

 

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Copyright © 2017 ThreatExpert. All rights reserved.