× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 5d259ad1271bd7afef16073e548873c81eaecbb6dfac3da080a31943acdd4fbe
File name: 5d259ad1271bd7afef16073e548873c81eaecbb6dfac3da080a31943acdd4fbe
Detection ratio: 3 / 56
Analysis date: 2015-07-23 23:04:26 UTC ( 3 years, 9 months ago )
Antivirus Result Update
Kaspersky HEUR:Exploit.SWF.Agent.gen 20150723
McAfee Exploit-CVE2015-5122 20150723
McAfee-GW-Edition BehavesLike.Flash.Exploit.kg 20150723
Ad-Aware 20150723
AegisLab 20150723
Yandex 20150723
AhnLab-V3 20150723
Alibaba 20150723
ALYac 20150723
Antiy-AVL 20150723
Arcabit 20150723
Avast 20150723
AVG 20150723
Avira (no cloud) 20150723
AVware 20150723
Baidu-International 20150723
BitDefender 20150723
Bkav 20150723
ByteHero 20150724
CAT-QuickHeal 20150722
ClamAV 20150723
Comodo 20150723
Cyren 20150723
DrWeb 20150723
Emsisoft 20150723
ESET-NOD32 20150723
F-Prot 20150723
F-Secure 20150723
Fortinet 20150723
GData 20150723
Ikarus 20150723
Jiangmin 20150723
K7AntiVirus 20150723
K7GW 20150723
Kingsoft 20150724
Malwarebytes 20150723
Microsoft 20150723
eScan 20150723
NANO-Antivirus 20150723
nProtect 20150723
Panda 20150723
Qihoo-360 20150724
Rising 20150722
Sophos AV 20150723
SUPERAntiSpyware 20150723
Symantec 20150723
Tencent 20150724
TheHacker 20150723
TotalDefense 20150723
TrendMicro 20150723
TrendMicro-HouseCall 20150723
VBA32 20150723
VIPRE 20150723
ViRobot 20150723
Zillya 20150723
Zoner 20150723
The file being studied is a SWF file! SWF files deliver vector graphics, text, video, and sound over the Internet.
Commonly abused SWF properties
The studied SWF file makes use of ActionScript3, some exploits have been found in the past targeting the ActionScript Virtual Machine. ActionScript has also been used to force unwanted redirections and other badness. Note that many legitimate flash files may also use it to implement rich content and animations.
Contains ActionScript code to request and retrieve content from Internet URLs.
The studied SWF file performs environment identification.
SWF Properties
SWF version
13
Compression
zlib
Frame size
1.0x1.0 px
Frame count
1
Duration
0.042 seconds
File attributes
HasMetadata, ActionScript3, UseNetwork
Unrecognized SWF tags
2
Total SWF tags
21
ActionScript 3 Packages
flash.display
flash.events
flash.net
flash.system
flash.text
flash.text.engine
flash.utils
mx.core
ExifTool file metadata
MIMEType
application/x-shockwave-flash

ImageSize
1x1

FileType
SWF

Megapixels
1e-06

FrameRate
24

FlashVersion
13

FileTypeExtension
swf

Compressed
True

ImageWidth
1

Duration
0.04 s

FlashAttributes
UseNetwork, ActionScript3, HasMetadata

FrameCount
1

ImageHeight
1

File identification
MD5 df7918c24a90c531721373450712cb2b
SHA1 a655eeed7081314fe28374b43ab168327e1e6ef9
SHA256 5d259ad1271bd7afef16073e548873c81eaecbb6dfac3da080a31943acdd4fbe
ssdeep
768:v6Zfhm7AnLq5jE+Ew9hAxY4kKgb59GHlf0Rx8y++5AWCBS+ho2frR:vufhm7NZErwbyY4c5Px8y+SQh1frR

File size 39.3 KB ( 40224 bytes )
File type Flash
Magic literal
Macromedia Flash data (compressed), version 13

TrID Macromedia Flash Player Compressed Movie (100.0%)
Tags
flash exploit zlib cve-2015-5122 capabilities

VirusTotal metadata
First submission 2015-07-23 23:04:26 UTC ( 3 years, 9 months ago )
Last submission 2015-07-23 23:04:26 UTC ( 3 years, 9 months ago )
File names 5d259ad1271bd7afef16073e548873c81eaecbb6dfac3da080a31943acdd4fbe
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!