Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

virus total scan - .zip file inside powerpoint?


  • Please log in to reply
No replies to this topic

#1 aSILENTfire

aSILENTfire

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:54 PM

Posted 25 March 2013 - 09:32 PM

I got a powerpoint in an email attachment, virustotal reports a zip file inside...
 
1.) Is there always a .zip file inside powerpoints?
2.) What malicious benefit could a zip file provide?
3.) How can I alalize the ZIP compressed archive (2.5%)
 
ssdeep

1536:d98NvL6Ra3cQewv87TClJ2HsrwRKbbEBbfnCY9Gbt09bfmh4jVuJTVxZbbFH5T14:dfJR4EBfnCK+JTVxZbb59q5/nfcQtb

 

TrID

PowerPoint Microsoft Office Open XML Format document (97.4%)
ZIP compressed archive (2.5%)

 

F-Prot packer identifier

appended

 

ExifTool

SharedDoc................: No
Title....................: MEMORY
HyperlinksChanged........: No
TitlesOfParts............: Office Theme, MEMORY, What is Memory, Memory involved three fundamental processes, The stage model of Memory, Sensory Memory, Sensory Memory, Sensory Memory, Short-Term Memory, Short-Term Memory, Short-Term Memory, Short-Term Memory Working Memory, Long-term Memory, Long-Term Memory, Long-Term Memory Transforming or encoding memory, Long-Term Memory Types of Information, Long-Term Memory Subsystems, Maintenance Rehearsal , Elaborate Rehearsal , Retrieval , PowerPoint Presentation, PowerPoint Presentation, Encoding Specificity Principle , Forgetting , Forgetting
LinksUpToDate............: No
LastModifiedBy...........: RLLocal
Application..............: Microsoft Office PowerPoint
ZipFileName..............: [Content_Types].xml
CreateDate...............: 2013:03:19 17:24:18Z
ZipRequiredVersion.......: 20
PresentationFormat.......: On-screen Show (4:3)
ModifyDate...............: 2013:03:21 18:42:41Z
ZipCRC...................: 0x77df5b31
Slides...................: 24
Words....................: 875
ScaleCrop................: No
RevisionNumber...........: 48
MIMEType.................: application/vnd.openxmlformats-officedocument.presentationml.presentation
ZipBitFlag...............: 0x0006
FileType.................: PPTX
Paragraphs...............: 97
AppVersion...............: 14.0
ZipUncompressedSize......: 8130
ZipCompressedSize........: 690

Notes....................: 0
ZipModifyDate............: 1980:01:01 00:00:00
HeadingPairs.............: Theme, 1, Slide Titles, 24
TotalEditTime............: 16.7 hours
ZipCompression...........: Deflated
Creator..................: Stephanie Evenson
HiddenSlides.............: 0
PreviewImage.............: (Binary data 4096 bytes)
MMClips..................: 0


Edited by aSILENTfire, 25 March 2013 - 09:38 PM.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users