Resume v0[.]1[.]doc | Triage

Sharing

General

Target

Resume v0.1.doc
Size

39KB
MD5

ca5c5a30307f853d9ddd57bf60ebd2ed
SHA1

5bb802f8d140818066b78bec2b102dea398dbc16
SHA256

4b5f8c83f63c4268e5006c8f7c98fea1196d8a20b195788c65aafe4c399a5eac
SHA512

761af1c18986f7ed22ca5f224bf5f954861dffbbfb3626849ab79f2101a2ae46387b94f824c9090073578041f205081e4434ec0764ff71c3e9c751fa972e1e4e
SSDEEP

384:+LIieom6t2pwGiSJPw+QD1fT36iDNvxz99E50j7S/t:AIieom6t2M+k77Dxxz99Q

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Resume v0.1.doc
.doc windows office2003

ThisDocument

NewMacros