× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 93563f80e4f734c8ee18e426e38ef62c083d93d8c7710d2cb6a2741a8162a280
File name: giving-immediate_prescribe-immigrant.swf
Detection ratio: 7 / 46
Analysis date: 2013-03-06 14:56:54 UTC ( 6 years ago ) View latest
Antivirus Result Update
AntiVir EXP/FLASH.Ikwlino.Gen 20130306
Avast Win32:Malware-gen 20130306
AVG SWF/Exploit.AG 20130306
F-Secure Exploit:SWF/Salama.B 20130306
GData Win32:Malware-gen 20130306
Microsoft TrojanDownloader:Win32/Small.gen!AP 20130306
VIPRE LooksLike.SWF.Malware.c (v) 20130306
Yandex 20130306
AhnLab-V3 20130306
Antiy-AVL 20130306
BitDefender 20130306
ByteHero 20130304
CAT-QuickHeal 20130306
ClamAV 20130306
Commtouch 20130306
Comodo 20130306
DrWeb 20130306
Emsisoft 20130306
eSafe 20130211
ESET-NOD32 20130306
F-Prot 20130306
Fortinet 20130306
Ikarus 20130306
Jiangmin 20130304
K7AntiVirus 20130305
Kaspersky 20130306
Kingsoft 20130304
Malwarebytes 20130306
McAfee 20130306
McAfee-GW-Edition 20130306
eScan 20130306
NANO-Antivirus 20130306
Norman 20130306
nProtect 20130306
Panda 20130306
PCTools 20130306
Rising 20130306
Sophos AV 20130306
SUPERAntiSpyware 20130306
Symantec 20130306
TheHacker 20130305
TotalDefense 20130306
TrendMicro 20130306
TrendMicro-HouseCall 20130306
VBA32 20130305
ViRobot 20130306
The file being studied is a SWF file! SWF files deliver vector graphics, text, video, and sound over the Internet.
Commonly abused SWF properties
The studied SWF file makes use of ActionScript3, some exploits have been found in the past targeting the ActionScript Virtual Machine. ActionScript has also been used to force unwanted redirections and other badness. Note that many legitimate flash files may also use it to implement rich content and animations.
The studied SWF file fingerprints the OS executing it.
The studied SWF file performs environment identification.
The flash file embeds one or more Portable Executables.
SWF Properties
SWF version
11
Compression
zlib
Frame size
500.0x375.0 px
Frame count
1
Duration
0.042 seconds
File attributes
HasMetadata, ActionScript3
Unrecognized SWF tags
1
Total SWF tags
14
ActionScript 3 Packages
flash.display
flash.events
flash.media
flash.net
flash.system
flash.text
flash.utils
mx.core
SWF metadata
ExifTool file metadata
MIMEType
application/x-shockwave-flash

ImageSize
500x375

FileType
SWF

Megapixels
0.188

FrameRate
24

FlashVersion
11

FileTypeExtension
swf

Compressed
True

ImageWidth
500

Duration
0.04 s

FlashAttributes
ActionScript3, HasMetadata

FrameCount
1

ImageHeight
375

File identification
MD5 ec0df4339fc7dcf9d3ae240c97f16a35
SHA1 667e8cd964fe14913be8b7418064595a734a8a50
SHA256 93563f80e4f734c8ee18e426e38ef62c083d93d8c7710d2cb6a2741a8162a280
ssdeep
1536:Zxos/tXI13crdMG+Pct6lSgx+TaN+hERZI+PPqq8r:W326LtsgYTa0hkZ5Ptw

File size 48.0 KB ( 49154 bytes )
File type Flash
Magic literal
Macromedia Flash data (compressed), version 11

TrID Macromedia Flash Player Compressed Movie (100.0%)
Tags
os-checking flash cve-2013-0634 zlib capabilities exploit exe-embedded cve-2015-0323

VirusTotal metadata
First submission 2013-03-06 14:56:54 UTC ( 6 years ago )
Last submission 2014-05-21 21:49:21 UTC ( 4 years, 10 months ago )
File names giving-immediate_prescribe-immigrant.swf
EC0DF4339FC7DCF9D3AE240C97F16A35
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!