Powerpoint sample not executed correctly in Malware Analysis Appliance

book

Article ID: 170143

calendar_today

Updated On:

Products

Malware Analysis Software - MA

Issue/Introduction

A powerpoint malware sample (ppsx extension) was not properly executed in the iVM Profile on Malware Analysis Appliance (MAA). During the iVM task Microsoft Powerpoint pop-up a dialbox that says "Powerpoint has detected that your graphics card may not be configured properly for an optimal slide show experience".

"Powerpoint has detected that your graphics card may not be configured properly for an optimal slide show experience".

Cause

The error or notification message is due to a lot of heavy animations in PowerPoint that consumes too much resources without a proper graphic card.

Resolution

Just need to disable the hardware acceleration for his display card in the MS Powerpoint in each iVM.

  1. Customize the iVM,
  2. Remote Desktop in to the iVM (MAA IP:3389 with admin/<blank> for login),
  3. Launch Powerpoint, and disable the hardware graphics acceleration.(PowerPoint options> Advanced> Untick "Disabled hardware graphics acceleration")