× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: a8db32f91a299bee57172022b63d06669f1774ffe42053342fc09be2b24849ba
File name: Mahnung X X.pdf
Detection ratio: 1 / 46
Analysis date: 2013-03-04 20:12:37 UTC ( 1 year, 1 month ago ) View latest
Antivirus Result Update
Microsoft Exploit:Win32/CVE-2010-0188 20130304
AVG 20130304
Agnitum 20130304
AhnLab-V3 20130304
AntiVir 20130304
Antiy-AVL 20130304
Avast 20130304
BitDefender 20130304
ByteHero 20130304
CAT-QuickHeal 20130304
ClamAV 20130304
Commtouch 20130304
Comodo 20130304
DrWeb 20130304
ESET-NOD32 20130304
Emsisoft 20130304
F-Prot 20130304
F-Secure 20130304
Fortinet 20130304
GData 20130304
Ikarus 20130226
Jiangmin 20130304
K7AntiVirus 20130304
Kaspersky 20130304
Kingsoft 20130304
Malwarebytes 20130304
McAfee 20130304
McAfee-GW-Edition 20130304
MicroWorld-eScan 20130304
NANO-Antivirus 20130304
Norman 20130304
PCTools 20130304
Panda 20130304
Rising 20130304
SUPERAntiSpyware 20130304
Sophos 20130304
Symantec 20130304
TheHacker 20130302
TotalDefense 20130304
TrendMicro 20130304
TrendMicro-HouseCall 20130304
VBA32 20130304
VIPRE 20130304
ViRobot 20130304
eSafe 20130211
nProtect 20130304
The file being studied is a PDF document! The document's header reveals it is using the following file format specification: %PDF-1.6.
PDFiD information
This PDF document contains at least one embedded file. Embedded files can be used in conjunction with launch actions in order to run malicious executables in the machine viewing the PDF.
This PDF document has an invalid cross reference table.
This PDF document contains AcroForm objects. AcroForm Objects can specify and launch scripts or actions, that is why they are often abused by attackers.
This PDF document has 2 pages, please note that most malicious PDFs have only one page.
This PDF document has 26 object start declarations and 26 object end declarations.
This PDF document has 12 stream object start declarations and 12 stream object end declarations.
This PDF document has a cross reference table (xref).
This PDF document has a trailer dictionary containing entries allowing the cross reference table, and thus the file objects, to be read.
ExifTool file metadata
MIMEType
application/pdf

FileCreateDate
2014:03:06 10:35:30+01:00

FileType
PDF

Linearized
No

FileAccessDate
2014:03:06 10:35:30+01:00

Warning
Invalid xref table

PDFVersion
1.6

File identification
MD5 97b720519aefa00da58026f03d818251
SHA1 5ff2663e8698c07937a3a2af62463ed3d0fc7862
SHA256 a8db32f91a299bee57172022b63d06669f1774ffe42053342fc09be2b24849ba
ssdeep
192:KhZjYnwAO9Gw/vqvQNi/60un/T6DSDdIlqEpGfGckcoljGj8Z:KhZEwAO9GUUQi/60G7uSRgpGf7OKo

File size 9.3 KB ( 9514 bytes )
File type PDF
Magic literal
PDF document, version 1.6

TrID Adobe Portable Document Format (100.0%)
Tags
exploit attachment pdf invalid-xref acroform file-embedded cve-2010-0188

VirusTotal metadata
First submission 2013-03-04 16:39:12 UTC ( 1 year, 1 month ago )
Last submission 2013-03-25 12:22:51 UTC ( 1 year ago )
File names Mahnung H Mallmann.pdf
Mahnung Renate Armu__td_.pdf
Mahnung Roger Periat.pdf
Mahnung Bratsikas Vangelis.pdf
Mahnung Benedikt Merklin.pdf
Mahnung Martin Hofstetter.pdf
Mahnung Lorenz.pdf
Mahnung Fratmo Gerry.pdf
Mahnung Thomas Plassmann.pdf
Mahnung Edith Bures.pdf
Mahnung Rainer Kuck.pdf
Mahnung Hain.pdf
Mahnung Johann Schmiedhofer.pdf
Mahnung Sven Laudel.pdf
Mahnung Heinz-G_nter Rein.pdf
Mahnung Stefan Schunck.pdf
Mahnung Jennifer Mehler.pdf
Mahnung Jan-friso.pdf
Mahnung Eric Schwarzer.pdf
Mahnung X X.pdf
Mahnung Heidemarie Wieske.pdf
Mahnung_1.pdf
pdf-exploit-04032013.pdfext
Mahnung Margit.pdf
Mahnung Michaela Kohl.pdf
ExifTool file metadata
MIMEType
application/pdf

FileCreateDate
2014:03:06 10:35:30+01:00

FileType
PDF

Linearized
No

FileAccessDate
2014:03:06 10:35:30+01:00

Warning
Invalid xref table

PDFVersion
1.6

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!