Cryptam // document analysis


Sample Details

original filename: vbaProject.bin

size: 1929706 bytes
submitted: 2018-02-08 23:20:02
md5: 854aaee974380d6cf5de8345691ee2cf
sha1: f865fb5de95fc0bec5ac6059e90ea7618c647d6e
sha256: ab7e14415fe0575671c73c301ad2a95dee4d6efa5e86d516f4887bbae27fcdb4
ssdeep: 24576:hVeAn6bMcahbkO9aI8Fg5MpVvPBKaIO2QNP7kQMyUwpLthX:WAncMcGbkOIdp5PBKaIO2QNPwQMC
content/type: Composite Document File V2 Document, Cannot read section info
analysis time: 3.33 s
result: malware [12]
embedded executable: found

signature hits:

1794842: suspicious.office Visual Basic macro
1562027: string.vbs On Error Resume Next


Strings

raw strings
decrypted raw strings