PDF static analysis report

Static analysis result for SHA-256 436d8716f942752c…

SUSPICIOUS

PDF

609.9 KB Created: 2011-08-03 16:37:37 -03:00 Authoring application: Microsoft® Word 2010 First seen: 2014-04-05
MD5: e7181912b1e507e76de016cb7ccb9517 SHA-1: d728ee031c7290013f851452f0d5bcca717bcdee SHA-256: 436d8716f942752c731633ffbb7e3c7b37665f82f5b17e3db020fa0d26e03eeb
42 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0001

Heuristics 2

  • Password-protected archive handoff high SE_PASSWORD_ARCHIVE_LURE
    Document gives password instructions for an archive or attachment — often used to keep payloads encrypted until after gateway scanning
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.pr.gov.br/bpp In PDF document text