Cryptam // document analysis


Sample Details

original filename: vbaProject.bin

size: 912896 bytes
submitted: 2017-07-12 19:24:22
md5: 4cefa03b7022fd4e179d92d0cce4098b
sha1: a0e4e88b48e2b83ed8c19e8eb7843cd857aa5b25
sha256: 1fd48d2979494d2b434fff3fcbbaa0569b923b65c5d4f8bbb71798e5f7c15db3
ssdeep: 12288:1yzMkHhAF02zmOZma21iEkVBQNJXCRbslLu5L:1VKhsAcma2wEqSJypslLu
content/type: Composite Document File V2 Document, No summary info
analysis time: 1.66 s
result: malware [12]
embedded executable: found

signature hits:

799002: suspicious.office Visual Basic macro
822182: string.shell32.dll


Strings

raw strings
decrypted raw strings