PDF static analysis report

Static analysis result for SHA-256 6bddf44a2dd60492…

CLEAN

PDF

93.4 KB First seen: 2019-01-12
MD5: 88ffdd94725556182bb77a1021bfc81a SHA-1: 7d6173ecf77c8fe0c23a62dc0fa616ecb29eb9b6 SHA-256: 6bddf44a2dd6049272282ede268169185f198d82ef1055cdf3a5e6df1b2806c8
10 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0149

Heuristics 2

  • External URI low PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.ektare.com PDF link annotation
    • http://www.ektare.com)endobj26In PDF document text
    • http://www.iec.chIn PDF document text

Extracted artifacts 9

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_014_off0000eee4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xEEE4 32920 bytes
SHA-256: 016034d9c6d3e22a9a1e40de5294d9b0aee13ad97aa0ee2cf3dfd6fdccebb54c
icc_00_off000042c8.icc pdf-icc-profile PDF ICC profile at offset 0x42C8 3144 bytes
SHA-256: 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
icc_02_off00005872.icc pdf-icc-profile PDF ICC profile at offset 0x5872 1328 bytes
SHA-256: eda03c8910c87b8a3e3c1ffbc35d223da8ae1d0dcfbad0c153c4eefbff436723
icc_03_off00005bf4.icc pdf-icc-profile PDF ICC profile at offset 0x5BF4 1296 bytes
SHA-256: 94722fe267764797f8887379cc0d355f5118beb3d186e087bfbd9e1a3f2d3f49
font_00_sfnt_off0000629c.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x629C 18988 bytes
SHA-256: 39306204565fe8138248f04e8df0415c478e0551dc931b3c4a9f4bdf9da8dadb
font_01_sfnt_off00009099.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x9099 19008 bytes
SHA-256: 0edda21c492a519764afc5db8e0d4a712affcc8f2a4d863643a02409d694af08
font_02_sfnt_off0000c04f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC04F 3240 bytes
SHA-256: a9edf2b1e0dff1fd8ef97800a6345972e4fa4354d4d1c6f8c58cff206e337301
font_03_sfnt_off0000cb3f.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xCB3F 10744 bytes
SHA-256: f8dcbbdead6a70e90d3511376b532f56c6374557e60847780ea2d50435451e16
font_05_sfnt_off00013e5d.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x13E5D 19584 bytes
SHA-256: 41bfbe1d9dcc9d0ab9c1e4c04f976bc7c4eb2c60ce6cfa4dcfa3802d66da9bee