Submission Summary:

 

Technical Details:

 

File System Modifications

#Filename(s)File SizeFile Hash
1 %Temp%\docProps\app.xml 995 bytes MD5: 0x54977C4DCE4DDD3A8C5054AA56A295AB
SHA-1: 0x0FD9F5BB263A613DE289C491D416AFBF84B8A129
2 %Temp%\docProps\core.xml 732 bytes MD5: 0x04CC0620C70E025A97119E16E7342A3B
SHA-1: 0xA3583A75F880DC88758A62FAD0AA4C2987F77D4C
3 %Temp%\word\document.xml 5,096 bytes MD5: 0xA1DB9F86280C75E2E27EFFCDFECC5FF8
SHA-1: 0x918AA5C276235FC330DBDAD4C75887AA99CD2653
4 %Temp%\word\embeddings\oleObject1.bin 6,656 bytes MD5: 0xC84D7F3297F5F6F091E0DD141D904268
SHA-1: 0x60F6DE409746DD7B221CB7375B98B13D03FD0557
5 %Temp%\word\fontTable.xml 1,299 bytes MD5: 0x4DF8AEF5BA29F190D691575A8F5FB358
SHA-1: 0x7D4DF4C018803E8B639EA610CE32CE0EF3A20F42
6 %Temp%\word\media\image1.emf 5,424 bytes MD5: 0x530BE107236E8A92C893385EDD0CC56F
SHA-1: 0x3047AB05EBEE344BA673029E45000991D003188B
7 %Temp%\word\media\image2.png 132,276 bytes MD5: 0x3C924589BE639A196F6D877392B69A46
SHA-1: 0x03B07D3DB501F4B3E3093F280A4A1930CD29C79F
8 %Temp%\word\settings.xml 4,783 bytes MD5: 0x27D0324D89B563F256CE297394A01033
SHA-1: 0xF1266E7F333B2F5602F6A143CCCE75779727B926
9 %Temp%\word\styles.xml 29,121 bytes MD5: 0x04EFC09C26EAD0E99E03EA2D403A8264
SHA-1: 0x0F5C26792993614852DDB08945DB07B424989DC6
10 %Temp%\word\theme\theme1.xml 6,850 bytes MD5: 0x3191D541839E4D100931377C4C66E0A1
SHA-1: 0x434E4FF902EE4436CE160B68AC8AB7AC96D81A19
11 %Temp%\word\webSettings.xml 576 bytes MD5: 0x261BA76E04BD8DDBD0F4E7A50D02F4C7
SHA-1: 0xB62CEC3537CCCBF6232EB90C87EE72884EB2E5E3
12 %Temp%\word\_rels\document.xml.rels 1,226 bytes MD5: 0x3E2BEF7B5E247CD6C2005E00BF1CEFBD
SHA-1: 0xF9ED780BD43AFD0C3BA1E9FF7E80F33D86A55278
13 %Temp%\[Content_Types].xml 1,510 bytes MD5: 0xAB8791AD02DC3E442C1AE9E4F69FE610
SHA-1: 0x3DF92953A4E4A54D87E94426462A574A76005966
14 %Temp%\_rels\.rels 590 bytes MD5: 0x77BF61733A633EA617A4DB76EF769A4D
SHA-1: 0x9D7ABF0EE4EFFCECAD80C8BBFB276079A05B4342
15 [file and pathname of the sample #1] 149,283 bytes MD5: 0xBEA381C0FBD24F1503018B3B9089E358
SHA-1: 0xE0E3204E3E87D3235483007D6DB54C1F7636EFBC

 

 

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Copyright © 2017 ThreatExpert. All rights reserved.