MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1027 Obfuscated Files or Information
The primary finding is the use of XOR-encoded strings with a key of 0x46, a common technique for evading static analysis. The document body contains placeholder text and does not provide further clues about the specific malicious intent. No other malicious indicators were extracted.
Heuristics 1
-
XOR-encoded strings (key 0x46) critical SC_XOR_ENCODEDFound 3 Windows library/API name(s) XOR-encoded with single-byte key 0x46: 'shlwapi.dll', 'VirtualAlloc', 'CreateProcessA'
Open this report in the interactive analyzer, or submit your own file for analysis.