× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: de908d5eeb398f68e35b5fbdd7e0af20922657e424501bc0b1cbc88b1572283b
File name: pdf_nuclear_00000066.repld.dat
Detection ratio: 6 / 47
Analysis date: 2013-11-19 13:24:52 UTC ( 5 měsíců ago )
Antivirus Result Update
Avast JS:Pdfka-BXT [Expl] 20131119
Kaspersky HEUR:Exploit.PDF.Generic 20131119
McAfee-GW-Edition Heuristic.BehavesLike.PDF.Exploit-BAY.F 20131118
NANO-Antivirus Exploit.Script.Heuristic-pdf.gutws 20131119
Sophos Troj/PDFJS-AFC 20131119
TrendMicro HEUR_PDFJS.STREM 20131119
AVG 20131119
Agnitum 20131119
AhnLab-V3 20131119
AntiVir 20131119
Antiy-AVL 20131119
Baidu-International 20131119
BitDefender 20131119
Bkav 20131119
ByteHero 20131118
CAT-QuickHeal 20131119
ClamAV 20131119
Commtouch 20131119
Comodo 20131119
DrWeb 20131119
ESET-NOD32 20131119
Emsisoft 20131119
F-Prot 20131119
F-Secure 20131119
Fortinet 20131119
GData 20131119
Ikarus 20131119
Jiangmin 20131119
K7AntiVirus 20131118
K7GW 20131118
Kingsoft 20130829
Malwarebytes 20131119
McAfee 20131119
MicroWorld-eScan 20131119
Microsoft 20131119
Norman 20131119
Panda 20131119
Rising 20131118
SUPERAntiSpyware 20131118
Symantec 20131119
TheHacker 20131118
TotalDefense 20131118
TrendMicro-HouseCall 20131119
VBA32 20131119
VIPRE 20131119
ViRobot 20131119
nProtect 20131119
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.6.
PDFiD information
This PDF document has an invalid cross reference table.
This PDF document contains AcroForm objects. AcroForm Objects can specify and launch scripts or actions, that is why they are often abused by attackers.
This PDF document has 3 pages, please note that most malicious PDFs have only one page.
This PDF document has 17 object start declarations and 16 object end declarations.
This PDF document has 4 stream object start declarations and 4 stream object end declarations.
This PDF document has a cross reference table (xref).
This PDF document has a pointer to the cross reference table (startxref).
This PDF document has a trailer dictionary containing entries allowing the cross reference table, and thus the file objects, to be read.
ExifTool file metadata
MIMEType
application/pdf

FileType
PDF

Warning
Invalid xref table

PDFVersion
1.6

Linearized
No

File identification
MD5 f22d8ef8d7baca1ce14d713c4e1c75cf
SHA1 ebd96fe73269a4f030769f0cbd8e18be48f3b0aa
SHA256 de908d5eeb398f68e35b5fbdd7e0af20922657e424501bc0b1cbc88b1572283b
ssdeep
192:SKkpV0pF1K3tVYt+CUyZaXa2aqixLGoybVWHyr8oUSlHD+A3HsSt/FRVxwc:SK0V0BK3vYYgZaXa2aqipWVWHSlHD+A5

File size 9.1 KB ( 9311 bytes )
File type PDF
Magic literal
PDF document, version 1.6

TrID Adobe Portable Document Format (100.0%)
Tags
pdf acroform invalid-xref

VirusTotal metadata
First submission 2013-11-19 13:24:52 UTC ( 5 měsíců ago )
Last submission 2013-11-19 13:24:52 UTC ( 5 měsíců ago )
File names pdf_nuclear_00000066.repld.dat
ExifTool file metadata
MIMEType
application/pdf

FileType
PDF

Warning
Invalid xref table

PDFVersion
1.6

Linearized
No

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!