× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 78173205204dc425b9ca7d25a873606af03d45510e3d23c15adf8664b051c39e
File name: sw_report_2.pdf
Detection ratio: 0 / 61
Analysis date: 2018-04-14 09:49:53 UTC ( 5 months, 1 week ago )
Antivirus Result Update
Ad-Aware 20180414
AegisLab 20180414
AhnLab-V3 20180413
Alibaba 20180413
ALYac 20180414
Antiy-AVL 20180414
Arcabit 20180414
Avast 20180414
Avast-Mobile 20180413
AVG 20180414
Avira (no cloud) 20180413
AVware 20180414
Baidu 20180413
BitDefender 20180414
Bkav 20180410
CAT-QuickHeal 20180413
ClamAV 20180414
CMC 20180414
Comodo 20180414
CrowdStrike Falcon (ML) 20170201
Cybereason None
Cylance 20180414
Cyren 20180414
DrWeb 20180414
eGambit 20180414
Emsisoft 20180414
Endgame 20180403
ESET-NOD32 20180414
F-Prot 20180414
F-Secure 20180414
Fortinet 20180414
GData 20180414
Ikarus 20180414
Sophos ML 20180121
Jiangmin 20180414
K7AntiVirus 20180414
K7GW 20180414
Kaspersky 20180414
Kingsoft 20180414
Malwarebytes 20180414
MAX 20180414
McAfee 20180414
McAfee-GW-Edition 20180414
Microsoft 20180414
eScan 20180414
NANO-Antivirus 20180414
nProtect 20180414
Palo Alto Networks (Known Signatures) 20180414
Panda 20180414
Qihoo-360 20180414
Rising 20180414
SentinelOne (Static ML) 20180225
Sophos AV 20180414
SUPERAntiSpyware 20180414
Symantec 20180413
Symantec Mobile Insight 20180412
Tencent 20180414
TheHacker 20180410
TotalDefense 20180413
TrendMicro 20180414
TrendMicro-HouseCall 20180414
Trustlook 20180414
VBA32 20180413
VIPRE 20180414
ViRobot 20180414
Webroot 20180414
WhiteArmor 20180408
Yandex 20180412
Zillya 20180413
ZoneAlarm by Check Point 20180414
Zoner 20180414
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.7.
PDFiD information
This PDF file contains 1 JavaScript block. Malicious PDF documents often contain JavaScript to exploit JavaScript vulnerabilities and/or to execute heap sprays. Please note you can also find JavaScript in PDFs without malicious intent.
This PDF file contains an automatic action to be performed when a given page of the document is viewed. Malicious PDF documents with JavaScript very often use an automatic action to launch the JavaScript without user interaction.
The combination of automatic actions and JavaScript makes this PDF document suspicious.
This PDF document contains 8 object streams. A stream object is just a sequence of bytes and very often is only used to store images and page descriptions, however, since it is not limited in length many attackers use these artifacts in conjunction with filters to obfuscate other objects.
This PDF document has 42 pages, please note that most malicious PDFs have only one page.
This PDF document has 194 object start declarations and 194 object end declarations.
This PDF document has 150 stream object start declarations and 150 stream object end declarations.
This PDF document has a pointer to the cross reference table (startxref).
ExifTool file metadata
InstanceID
uuid:41703787-7af7-4dfa-b7c4-6d6b9bbf4b3d

ManifestPlacedYResolution
300.0, 72.0

ManifestReferenceDocumentID
adobe:docid:photoshop:aedaf82e-b68e-11e1-95bd-efbfda6b3aa9, adobe:docid:photoshop:bb06cae9-3ba5-11df-8fe5-e9e0d613b15c

ThumbnailHeight
256

ManifestReferenceInstanceID
uuid:aedaf82f-b68e-11e1-95bd-efbfda6b3aa9, uuid:0e688b6d-3ba6-11df-8fe5-e9e0d613b15c

PDFVersion
1.7

MetadataDate
2012:06:27 13:44:49+09:00

XMPToolkit
Adobe XMP Core 4.2.1-c043 52.372728, 2009/01/18-15:08:04

ModifyDate
2012:06:27 13:44:49+09:00

RenditionClass
proof:pdf

Trapped
False

DerivedFromDocumentID
adobe:docid:indd:a76b8cf2-749f-11e1-8c6d-a381202d7133

DerivedFromInstanceID
e8eb5a1b-874e-11e1-9e56-f6db842745c1

CreateDate
2012:06:20 08:25:54+08:00

MIMEType
application/pdf

CreatorTool
Adobe InDesign CS3 (5.0)

ThumbnailWidth
256

ManifestPlacedResolutionUnit
Inches, Inches

FileType
PDF

Linearized
Yes

ManifestLinkForm
ReferenceStream, ReferenceStream

DocumentID
adobe:docid:indd:2b7d0ba0-b443-11e1-8628-e03733003845

Producer
Adobe PDF Library 8.0

Creator
Adobe InDesign CS3 (5.0)

Format
application/pdf

ThumbnailImage
(Binary data 17269 bytes, use -b option to extract)

FileTypeExtension
pdf

PageCount
42

ThumbnailFormat
JPEG

ManifestPlacedXResolution
300.0, 72.0

File identification
MD5 b8af8a5b69938b6d9f3bb51468ebf37c
SHA1 96e473316fb632b35dd3d9d08c9d7da989d9b713
SHA256 78173205204dc425b9ca7d25a873606af03d45510e3d23c15adf8664b051c39e
ssdeep
49152:/IWQdgtwNrJ8zoEy4pdzfVdzz1KVUr8CQe9hm6R:/IbdgteN8zo/4pdzfVdPEOCe9hmQ

File size 1.9 MB ( 2021712 bytes )
File type PDF
Magic literal
PDF document, version 1.7

TrID Adobe Portable Document Format (100.0%)
Tags
pdf autoaction

VirusTotal metadata
First submission 2012-07-12 22:23:07 UTC ( 6 years, 2 months ago )
Last submission 2018-04-14 09:49:53 UTC ( 5 months, 1 week ago )
File names file-4870938_
Starting%20Well_6271230.pdf
sw_report_2.pdf
sw_report_2.pdf
ExifTool file metadata
InstanceID
uuid:41703787-7af7-4dfa-b7c4-6d6b9bbf4b3d

ManifestPlacedYResolution
300.0, 72.0

ManifestReferenceDocumentID
adobe:docid:photoshop:aedaf82e-b68e-11e1-95bd-efbfda6b3aa9, adobe:docid:photoshop:bb06cae9-3ba5-11df-8fe5-e9e0d613b15c

ThumbnailHeight
256

ManifestReferenceInstanceID
uuid:aedaf82f-b68e-11e1-95bd-efbfda6b3aa9, uuid:0e688b6d-3ba6-11df-8fe5-e9e0d613b15c

PDFVersion
1.7

MetadataDate
2012:06:27 13:44:49+09:00

XMPToolkit
Adobe XMP Core 4.2.1-c043 52.372728, 2009/01/18-15:08:04

ModifyDate
2012:06:27 13:44:49+09:00

RenditionClass
proof:pdf

Trapped
False

DerivedFromDocumentID
adobe:docid:indd:a76b8cf2-749f-11e1-8c6d-a381202d7133

DerivedFromInstanceID
e8eb5a1b-874e-11e1-9e56-f6db842745c1

CreateDate
2012:06:20 08:25:54+08:00

MIMEType
application/pdf

CreatorTool
Adobe InDesign CS3 (5.0)

ThumbnailWidth
256

ManifestPlacedResolutionUnit
Inches, Inches

FileType
PDF

Linearized
Yes

ManifestLinkForm
ReferenceStream, ReferenceStream

DocumentID
adobe:docid:indd:2b7d0ba0-b443-11e1-8628-e03733003845

Producer
Adobe PDF Library 8.0

Creator
Adobe InDesign CS3 (5.0)

Format
application/pdf

ThumbnailImage
(Binary data 17269 bytes, use -b option to extract)

FileTypeExtension
pdf

PageCount
42

ThumbnailFormat
JPEG

ManifestPlacedXResolution
300.0, 72.0

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!