PDF static analysis report

Static analysis result for SHA-256 194721fe959b446a…

CLEAN

PDF

762.9 KB Created: 2007-05-21 18:56:34 +09:00 Authoring application: Acrobat Web Capture 8.0 First seen: 2014-09-26
MD5: 3ede015f80a8ff5fd9cd403302689392 SHA-1: 5523e31b81cdd7d67c33d19a8655d522c7ff628f SHA-256: 194721fe959b446a22bea347e9dd0a8c39d139dfd3f9d882b7d0f6df010cb336
24 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0017

Heuristics 3

  • Unusually high stream count medium PDF_MANY_STREAMS
    PDF contains 501+ stream objects — may indicate heap spray or heavy obfuscation
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://risl.snu.ac.kr/nosanr/Evolutionary%20Robot/evolution.htm PDF link annotation
    • http://risl.snu.ac.kr/nosanr/Evolutionary%20Robot/evolution.htm)/S/URIIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_cff_off00002740.bin pdf-font-stream PDF embedded font (cff) at offset 0x2740 120196 bytes
SHA-256: 7a83f61da4e911d43e917e3e2ebd70c11aad0d9878942cc9b29b3e30ba827a14