MALICIOUS
80
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
The file is a Microsoft Word document exhibiting characteristics of malicious code execution. Heuristics detected a NOP sled and an XOR decoder, commonly used to obfuscate shellcode. The document body is heavily obfuscated and unreadable, further supporting the presence of malicious intent. Without further script analysis or network indicators, the exact payload and delivery mechanism remain unclear.
Heuristics 2
-
NOP sled detected high SC_NOP_SLEDFound 20+ consecutive 0x90 bytes
-
XOR decoder loop stub high SC_XOR_DECODERXOR decoder loop stub
Open this report in the interactive analyzer, or submit your own file for analysis.