The Office 2003 exe (Microsoft Office Lite) sadicq@gmail com File Malware Analysis

The Office 2003.exe (Microsoft Office Lite) File Analysis

Updated 6 months ago

Checked by Malware Check

Office 2003.exe

Hash Type	Value	Action
MD5	640ef5727074fabacc950f75a10b4e72
SHA1	44cb822fe628f8eb0757f9593318901641a271dc
SHA256	506110537f73f960301ba5d8c55a1510b1bd6f5b2f8f36f6f71e5666680b0750
SHA512	b9724aaa22c7d000c5edffda903a806f741309eac1ae95959af110c8b45b798d421ab86115f45f828c9e4badcbbfd299da8ef5e9d795f6b32c9c416de872e5f0
ImpHash	cd8a7d721bbae2e9db3fb1f8e38ecb03

Hash Type

Value

Action

MD5

640ef5727074fabacc950f75a10b4e72

SHA1

44cb822fe628f8eb0757f9593318901641a271dc

SHA256

506110537f73f960301ba5d8c55a1510b1bd6f5b2f8f36f6f71e5666680b0750

SHA512

b9724aaa22c7d000c5edffda903a806f741309eac1ae95959af110c8b45b798d421ab86115f45f828c9e4badcbbfd299da8ef5e9d795f6b32c9c416de872e5f0

ImpHash

cd8a7d721bbae2e9db3fb1f8e38ecb03

PE Analysis

Basic Information

▼

Icon	Hash: cdca1dde9491650b570d92a92c9e9cc6 Fuzzy: 50d8196170b8c19a03f1d6b1b3dc23c4 dHash: 72f0b08ac884c071
Image Base	`0x00400000`
Entry Point	`0x00411d36`
Compilation Time	2005-03-06 07:06:25
Checksum	0x00000000 (Actual: 0x020e2973)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	4 libraries COMCTL32, KERNEL32, USER32, OLEAUT32
Exports	0 functions
Resources	13 Resources
Sections	4 Sections

Version Information

▼

CompanyName	[email protected]
FileDescription	Microsoft Office Lite
FileVersion	4, 14, 0, 0
InternalName	7zS.sfx
LegalCopyright	Copyright (C) 1999-2005 Igor Pavlov
OriginalFilename	7zS.sfx
ProductName	7-Zip
ProductVersion	4, 14, 0, 0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	93,819 bytes	94,208 bytes	6.52 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C424DF68260D874853ED32C1B0DABADC`
`.rdata`	`0x00018000`	20,396 bytes	20,480 bytes	4.60 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9DD439DD1D1040342C254AA975DA907C`
`.data`	`0x0001d000`	6,172 bytes	3,072 bytes	3.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0F97EEF8637C5373E991C34ED3C5D47D`
`.rsrc`	`0x0001f000`	34,330,169 bytes	34,323,517 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FD5A4488662B948D5C8AA237031A0E43`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 13 (24,632 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	8	23,424 bytes	95.1%
RT_DIALOG	1	180 bytes	0.7%
RT_STRING	2	166 bytes	0.7%
RT_GROUP_ICON	1	118 bytes	0.5%
RT_VERSION	1	744 bytes	3%

Certificate Chain Analysis

▼

Certificate Information

Product	7-Zip
Description	Microsoft Office Lite
File Version	4, 14, 0, 0
Original Name	7zS.sfx
Internal Name	7zS.sfx
Copyright	Copyright (C) 1999-2005 Igor Pavlov

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Office 2003.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-06-08 09:00:24 UTC

The Office 2003.exe (Microsoft Office Lite) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification