PDF static analysis report

Static analysis result for SHA-256 653d0c1f337890b7…

CLEAN

PDF

5.3 KB First seen: 2019-01-11
MD5: d44e6d4223deaf7daaa07d7465e07b0e SHA-1: 10132c58e5490e76f0934012c2f3c71f79ff2023 SHA-256: 653d0c1f337890b7d21e6e8592db6f202b1d70bb06278150b48c367e9b2e1bdd
2 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0159

Heuristics 1

  • PDF paints image(s) but contains no text operators info PDF_IMAGE_ONLY_LURE
    PDF has 2 image XObject(s) and the content stream contains no text-emitting operators (BT/ET, Tj, TJ, ', ") in either raw bytes or decompressed streams — this is the screenshot-as-PDF pattern used to bypass text-based scanners and to deliver instructions purely through rendered pixels. It is informational unless paired with invisible links or risky URI context.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
icc_00_off00000789.icc pdf-icc-profile PDF ICC profile at offset 0x789 1960 bytes
SHA-256: 283e482d9b10db98fb7df2f6ef4bdf4ddf8de5a07d2c7530cc361ec4b29ed39a