PDF static analysis report

Static analysis result for SHA-256 144b59c6bc8cdf1a…

CLEAN

PDF

1.47 MB Created: 2023-01-13 10:32:47 Authoring application: Версия 4022.00.55© 1992 - 2022 КонсультантПлюс Сборка 609545 (via КонсультантПлюс) First seen: 2023-12-08
MD5: 6febb5fcd3ffd37eb5e8720cf23ef855 SHA-1: 34ab7323e7fdc0f0023d1169f65d4554915ee246 SHA-256: 144b59c6bc8cdf1a4df302ce3c888644dacb86d199bb6b63c2c5cc04254256ba
12 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0029

Heuristics 3

  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://www.consultant.ru PDF link annotation

Related samples 4

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 5

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_068_off0014a7b9.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x14A7B9 113752 bytes
SHA-256: a409a1e572cea3ddfb3744e05c73831e0f9a29006cb1932fe60d2c9f22062a3d
font_00_sfnt_off00138c49.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x138C49 86586 bytes
SHA-256: 8eabb97dc1704ec56bbf13e3548b1d4721e78f43c4cddff42ef6cc9cca4c8933
font_01_sfnt_off001425c9.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x1425C9 79320 bytes
SHA-256: af6012f11c115193b041ae23dae07b5b9fc265654b7c4f546789c72e39fa86d0
font_03_sfnt_off00157346.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x157346 105019 bytes
SHA-256: efac0de4e1adc433a26657ab93bccea33f3b2b13a740552a3420d4a5209bea0c
font_04_sfnt_off00162aaf.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x162AAF 103550 bytes
SHA-256: 7df2096cbaa4070b5184728d2a223148c8bd5d7d482663d34780302f6de5e8aa

Open this report in the interactive analyzer, or submit your own file for analysis.