PDF / .VIR static analysis report

Static analysis result for SHA-256 5a2e65d2c80c0ffc…

CLEAN

PDF / .VIR

361.7 KB First seen: 2024-07-02
MD5: 6cb89ac6f32d66963cde74b2f967577a SHA-1: d43425beaa7befde54f5aab4f247ccd5e7eb2b39 SHA-256: 5a2e65d2c80c0ffc8d8c7c5ea4b376cff3665bab833050bcf067b770101ae379
6 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 3

  • External URI info PDF_URI
    PDF contains an external URL action
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://github.com/nk027/bvar In PDF document text
    • https://CRAN.R-projectIn PDF document text
    • https://journalIn PDF document text
    • https://kuschnig.eu/In PDF document text
    • https://CRAN.R-project.org/package=BVARIn extracted file (objstm_0001_00.bin)
    • https://CRAN.R-project.org/In PDF document text
    • https://CRAN.R-project.org/package=mfbvarIn extracted file (objstm_0001_00.bin)
    • https://CRAN.R-project.org/package=bvartoolsIn extracted file (objstm_0001_00.bin)
    • https://www.R-project.org/In extracted file (objstm_0001_00.bin)
    • https://www.nber.org/chapters/c7192In extracted file (objstm_0001_00.bin)
    • https://projecteuclid.org/In PDF document text
    • https://CRAN.R-project.org/package=BVARverseIn PDF document text
    • https://research.stlouisfed.org/In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/iX/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • https://doi.org/10.1093/epolic/eiy013PDF link annotation
    • https://doi.org/10.1016/j.jbankfin.2019.105658In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.3982/ecta14468In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1086/684160In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1002/jae.1137In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1162/0033553053327452In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1080/01621459.2014.960967In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.18637/jss.v080.i01In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1080/07350015.2020.1713796In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1016/b978-0-444-62731-5.00015-4In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1016/j.csda.2013.01.002In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.5281/zenodo.1308151In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1017/9781108164818In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1002/jae.1270In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1561/0800000013In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1016/j.jeconom.2018.11.009In extracted file (objstm_0001_00.bin)
    • https://CRAN.R-project.org/package=bvarsvIn extracted file (objstm_0001_00.bin)
    • https://doi.org/10.18637/jss.v063.i19In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1080/07350015.1986.10509491In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1002/sim.3680In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1023/a:1008929526011In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1080/07350015.2015.1086655In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.3386/w26872In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1093/restud/rdaa019In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1002/jae.2594In extracted file (objstm_0001_00.bin)
    • https://CRAN.R-project.org/package=BigVARIn extracted file (objstm_0001_00.bin)
    • https://doi.org/10.18637/jss.v027.i04In extracted file (objstm_0001_00.bin)
    • https://journal.r-project.org/archive/In extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1111/j.1467-937x.2005.00353.xIn extracted file (objstm_0001_00.bin)
    • https://doi.org/10.1111/j.1467-937x.2009.00578.xIn extracted file (objstm_0001_00.bin)
    • https://doi.org/10.2307/1912017In extracted file (objstm_0001_00.bin)

Extracted artifacts 31

Files carved from inside the sample during analysis.

FilenameKindSourceSize
objstm_0001_00.bin pdf-objstm-decoded PDF /ObjStm 1 0 obj (inflated) 22804 bytes
SHA-256: 27d942b4f65eee8de332acb44c19876e70f74377c4120e16a58abbf5cd78122a
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 6 long base64-like blob(s).
font_00_cff_off000075d0.bin pdf-font-stream PDF embedded font (cff) at offset 0x75D0 4522 bytes
SHA-256: f9483cdffa0397589dda2bec68cc8dc980cd63157ba3393cadbb2d4c0f0ba2cf
font_01_cff_off00008503.bin pdf-font-stream PDF embedded font (cff) at offset 0x8503 11640 bytes
SHA-256: 2f2e391bbfdac185629955c51d4102ff83e4adb599ca4d6d58b0614e3b9ec9dc
font_02_cff_off0000a65c.bin pdf-font-stream PDF embedded font (cff) at offset 0xA65C 2255 bytes
SHA-256: 5ee67b62d412c4c5e621a9b889175ba97f043d29be7688e09094e29190e76ef1
font_03_cff_off0000aee4.bin pdf-font-stream PDF embedded font (cff) at offset 0xAEE4 1089 bytes
SHA-256: 3ef885c0c80654d9d6d19f6b46c7faf34e829e195c7f7ded1ec52530e9341851
font_04_cff_off0000b34c.bin pdf-font-stream PDF embedded font (cff) at offset 0xB34C 9177 bytes
SHA-256: 58a8e8a343b206165add3c41ab37b292a2f0c888380a1bba97555e05bbf1d31b
font_05_cff_off00011ced.bin pdf-font-stream PDF embedded font (cff) at offset 0x11CED 3839 bytes
SHA-256: ca5bbc5fc7553d996b31191058b71b586cdb9cc474dd3ffa4aaea3ae45fcd6ed
font_06_cff_off000129eb.bin pdf-font-stream PDF embedded font (cff) at offset 0x129EB 3835 bytes
SHA-256: 730be4a184229d02578768f190a3a89140d2b1651d374a3f8ec502b0bea36859
font_07_cff_off0001365d.bin pdf-font-stream PDF embedded font (cff) at offset 0x1365D 8483 bytes
SHA-256: 46249cf8bf58fd9b4b7b5b7e51211c9e726419938218d6737e16e945db1d6042
font_08_cff_off00016873.bin pdf-font-stream PDF embedded font (cff) at offset 0x16873 231 bytes
SHA-256: c6e4c2bc819e32a0daa583e15805f75e409fc57d6b63846aeafd9af5033fe934
font_09_cff_off00021dd5.bin pdf-font-stream PDF embedded font (cff) at offset 0x21DD5 6114 bytes
SHA-256: 90beed57d3217cfcf170362be9f02dd03a17731360a4c1c586530e977abac35c
font_10_cff_off00024fe8.bin pdf-font-stream PDF embedded font (cff) at offset 0x24FE8 209 bytes
SHA-256: 942e635dc706da47728872936687ba24694cad617d7387b4aa868ec8815748aa
font_11_cff_off00026880.bin pdf-font-stream PDF embedded font (cff) at offset 0x26880 3881 bytes
SHA-256: 36c945fbed3d03febafd32811036410442be526caf92b909152851a52076e526
font_12_cff_off000276e2.bin pdf-font-stream PDF embedded font (cff) at offset 0x276E2 1850 bytes
SHA-256: 08459673a9c724b7f7955fa25e366f3dece9fda898de9e4a4785c122799c85db
font_13_cff_off00027d8e.bin pdf-font-stream PDF embedded font (cff) at offset 0x27D8E 2242 bytes
SHA-256: 4c43abb8f1bc313ee5debb9e48fd2883ac65f47b101f4a1a57106fe2e0f804b0
font_14_cff_off000285ab.bin pdf-font-stream PDF embedded font (cff) at offset 0x285AB 755 bytes
SHA-256: e173b7907e06789356bbcc21c8d51c74b8b7a32dc66c9aeca23281a6c3693661
font_15_cff_off000288bf.bin pdf-font-stream PDF embedded font (cff) at offset 0x288BF 736 bytes
SHA-256: 414310d90230b36293613a246d1b53f6f18f58df2c34ab4b3b76cab65355c2a0
font_16_cff_off00028cdd.bin pdf-font-stream PDF embedded font (cff) at offset 0x28CDD 353 bytes
SHA-256: 88500cd117d10862c32d81d80a15e05406fbc23b7af66995c8e955602e0c716b
font_17_cff_off00028e87.bin pdf-font-stream PDF embedded font (cff) at offset 0x28E87 1685 bytes
SHA-256: c4410508a52a8228ac2ce9f6487f83917e3637326eaa999b950d33467413430c
font_18_cff_off0002952a.bin pdf-font-stream PDF embedded font (cff) at offset 0x2952A 1089 bytes
SHA-256: c719607e2150b24e3a63c591b2202f429ad4cab93f8a729a4af9e64dd65a46f6
font_19_cff_off0002e632.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E632 649 bytes
SHA-256: 72618dd56597ffe5e5748c583233861914783c23a751e1796f5a3c4013d981f3
font_20_cff_off0002e918.bin pdf-font-stream PDF embedded font (cff) at offset 0x2E918 3768 bytes
SHA-256: af08ede980bc533819959b89bd2f94f37dd6a3501ee31150c7add4d3b4aa0000
font_21_cff_off00030c87.bin pdf-font-stream PDF embedded font (cff) at offset 0x30C87 354 bytes
SHA-256: b4213a47ea00d59513e180ddc8696993530ed8a5a33f9146b3f8c7bea327f8f5
font_22_cff_off00030e47.bin pdf-font-stream PDF embedded font (cff) at offset 0x30E47 796 bytes
SHA-256: 7c62611da0ec944f33c2f543bd958adc0f3d2fa97ad78a70f6429a21700ea6b1
font_23_cff_off000311b2.bin pdf-font-stream PDF embedded font (cff) at offset 0x311B2 311 bytes
SHA-256: f8b9f5a04b67c656bb9e34f0c53569791f00671d5d9c2b423e437f3f256166b8
font_24_cff_off0005209a.bin pdf-font-stream PDF embedded font (cff) at offset 0x5209A 323 bytes
SHA-256: 4eea9a37ee4a52c77c9615c21cabef578bc7ea8282bea579ff62cab2da242f7f
font_25_cff_off0005223e.bin pdf-font-stream PDF embedded font (cff) at offset 0x5223E 309 bytes
SHA-256: b6deeccfd3e726397f3ee76a089423ba2ea55d83a860d64d4b8db7c44172f4a6
font_26_cff_off000523d7.bin pdf-font-stream PDF embedded font (cff) at offset 0x523D7 4862 bytes
SHA-256: 9b3fd611522e4aeb61e08483f6a64338de8145933ed6e766c125e321b2f77d50
font_27_cff_off000534ce.bin pdf-font-stream PDF embedded font (cff) at offset 0x534CE 1197 bytes
SHA-256: 18cfddfbb057c65fe0eb10825f68ec0452eca9a624353abb5c269212382b42e2
font_28_cff_off0005393a.bin pdf-font-stream PDF embedded font (cff) at offset 0x5393A 669 bytes
SHA-256: 6fb16eb1c4f3d17875c36e826790fbd5d77ac0dc249f7e19dd70b23c8a9ba59a
font_29_cff_off00053c1a.bin pdf-font-stream PDF embedded font (cff) at offset 0x53C1A 10041 bytes
SHA-256: 5b634d7daeea316b33cf5ab893fe364dfc8a1b17ab39fc5f0b35a6e3c9d227c1