| SHA256: | 4967148f495f69f4441f22e2c3dcaf304f3e283b545cb1c4819d0343545c12fe |
| 文件名： | 123-093702027-reg-invoice.pdf |
| 检出率： | 12 / 56 |
| 分析日期： | 2017-04-19 13:31:35 UTC ( 1 年 前 ) 查看最新 |
| 反病毒软件 | 结果 | 病毒库日期 |
|---|---|---|
| Baidu | Multi.Threats.InArchive | 20170419 |
| ClamAV | Doc.Dropper.Dridex-6260340-0 | 20170419 |
| Fortinet | WM/TrojanDownloader.7A51!tr | 20170419 |
| Ikarus | Win32.Outbreak | 20170419 |
| McAfee | Artemis!18F440A8A9CF | 20170419 |
| McAfee-GW-Edition | BehavesLike.PDF.BadFile.qb | 20170419 |
| NANO-Antivirus | Trojan.Ole2.Vbs-heuristic.druvzi | 20170419 |
| Panda | O97M/Downloader | 20170419 |
| Qihoo-360 | virus.office.obfuscated.1 | 20170419 |
| Rising | Heur.Macro.Downloader.d (cloud:UJEmOxwGVqO) | 20170419 |
| TrendMicro | HEUR_VBA.O2 | 20170419 |
| ZoneAlarm by Check Point | HEUR:Trojan-Downloader.Script.Generic | 20170419 |
| Ad-Aware | 20170419 | |
| AegisLab | 20170419 | |
| AhnLab-V3 | 20170419 | |
| Alibaba | 20170419 | |
| ALYac | 20170419 | |
| Antiy-AVL | 20170419 | |
| Arcabit | 20170419 | |
| Avast | 20170419 | |
| AVG | 20170419 | |
| Avira (no cloud) | 20170419 | |
| AVware | 20170419 | |
| BitDefender | 20170419 | |
| Bkav | 20170419 | |
| CAT-QuickHeal | 20170419 | |
| CMC | 20170419 | |
| Comodo | 20170419 | |
| CrowdStrike Falcon (ML) | 20170130 | |
| Cyren | 20170419 | |
| DrWeb | 20170419 | |
| Emsisoft | 20170419 | |
| Endgame | 20170419 | |
| ESET-NOD32 | 20170419 | |
| F-Prot | 20170419 | |
| F-Secure | 20170419 | |
| GData | 20170419 | |
| Sophos ML | 20170413 | |
| Jiangmin | 20170419 | |
| K7AntiVirus | 20170419 | |
| K7GW | 20170419 | |
| Kaspersky | 20170419 | |
| Kingsoft | 20170419 | |
| Malwarebytes | 20170419 | |
| Microsoft | 20170419 | |
| eScan | 20170419 | |
| nProtect | 20170419 | |
| Palo Alto Networks (Known Signatures) | 20170419 | |
| SentinelOne (Static ML) | 20170330 | |
| Sophos AV | 20170419 | |
| SUPERAntiSpyware | 20170419 | |
| Symantec | 20170419 | |
| Symantec Mobile Insight | 20170414 | |
| Tencent | 20170419 | |
| TheHacker | 20170419 | |
| TrendMicro-HouseCall | 20170419 | |
| Trustlook | 20170419 | |
| VBA32 | 20170419 | |
| VIPRE | 20170419 | |
| ViRobot | 20170419 | |
| Webroot | 20170419 | |
| WhiteArmor | 20170409 | |
| Yandex | 20170418 | |
| Zillya | 20170418 | |
| Zoner | 20170419 |
The file being studied is a PDF document!
The document's header reveals it is using the following file format
specification: %PDF-1.4.
PDFiD information
This PDF file contains
2
JavaScript blocks.
Malicious PDF documents often contain JavaScript to exploit JavaScript
vulnerabilities and/or to execute heap sprays. Please note you can also find
JavaScript in PDFs without malicious intent.
This PDF file contains an open
action to be performed when the document is viewed. Malicious PDF documents
with JavaScript very often use open actions to launch the JavaScript without
user interaction.
The combination of automatic
actions and JavaScript makes this PDF document
suspicious.
This PDF document contains
at least one embedded file. Embedded files can be used in
conjunction with launch actions in order to run malicious executables in the
machine viewing the PDF.
This PDF document
has 1 page,
please note that most malicious PDFs have only one page.
This PDF document
has 13 object start declarations and
13 object end declarations.
This PDF document
has 3 stream object start declarations
and 3 stream object end
declarations.
This PDF document has a cross
reference table (xref).
This PDF document has a pointer
to the cross reference table (startxref).
This PDF document has a
trailer dictionary containing entries allowing the cross reference table,
and thus the file objects, to be read.
ExifTool file metadata
MIMEType
application/pdf
ModifyDate
2017:04:18 11:49:09+03:00
Producer
iTextSharp 5.5.10 2000-2016 iText Group NV (AGPL-version)
PageCount
1
FileType
PDF
Linearized
No
FileTypeExtension
pdf
PDFVersion
1.4
CreateDate
2017:04:18 11:49:09+03:00
Compressed bundles
File identification
MD5 18f440a8a9cf45a27c38cfe5c93d5dd4
SHA1 896609ec0f94bb1dc6a62efecded9cb94645d347
SHA256 4967148f495f69f4441f22e2c3dcaf304f3e283b545cb1c4819d0343545c12fe
ssdeep
1536:1ZLsjQL5j3ZfNgAYGd4NonALUxrBQZoxm8J:DwQNdfNgTZLUxrBQufJ
File size
57.5 KB ( 58840 bytes )
File type PDF
Magic literal
PDF document, version 1.4
| TrID |
Adobe Portable Document Format (100.0%) |
Tags
pdf
autoaction
file-embedded
attachment
js-embedded
VirusTotal metadata
First submission
2017-04-19 12:17:34 UTC ( 1 年 前 )
Last submission
2017-05-16 13:27:35 UTC ( 11 月, 1 周 前 )
| 文件名 |
123-234162946-reg-invoice.pdf 123-139443470-reg-invoice.pdf 123-621934133-reg-invoice.pdf 123-991482333-reg-invoice.pdf 123-216509287-reg-invoice.pdf 123-093702027-reg-invoice.pdf 123-486181600-reg-invoice.pdf Scan_0042_0926009086.pdf 123-127548981-reg-invoice.pdf 123-160193666-reg-invoice.pdf 123-161311468-reg-invoice.pdf 123-607714289-reg-invoice.pdf 123-473782096-reg-invoice.pdf 123-150763422-reg-invoice.pdf 5e9c4fdae09e4d50bb9bec0cc7ada959043b3ce6 123-264201479-reg-invoice.pdf 123-060548570-reg-invoice.pdf __substg1.0_37010102 123-327391945-reg-invoice.pdf 7fa8f01add7f7950c25d1c4e779eda5a 201704191235v3JCZ2KN003015dappprodauscertorgau-123-800690103-reg-invoice.pdf ce65bf99a51d709c6abbb10e4ff34d94 123-261745413-reg-invoice.pdf 123-094770973-reg-invoice.pdf |
ExifTool file metadata
MIMEType
application/pdf
ModifyDate
2017:04:18 11:49:09+03:00
Producer
iTextSharp 5.5.10 2000-2016 iText Group NV (AGPL-version)
PageCount
1
FileType
PDF
Linearized
No
FileTypeExtension
pdf
PDFVersion
1.4
CreateDate
2017:04:18 11:49:09+03:00
没有投票.
目前没有用户投票。