Filename: Visaform Turkey.pdf | MD5: f3b9663a01a73c5eca9d6b2a0519049e

Link to here

Document information

Original filename: Visaform Turkey.pdf

Size: 828744 bytes

Submitted: 2013-02-13 17:45:30

md5: f3b9663a01a73c5eca9d6b2a0519049e

sha1: d7579cc146fb3fe215a83bf36cefbeef96990a91

sha256: 2d6556f1f7896bb4b969cf778ba28618e7700e7ae928af49b9a6e869855bf5a4

ssdeep: 12288:7F1Gbzb4dCHXn+2vOC3GrsuQAKSWKqV6ooeAvf0SHzAgWvW+dVtratsU0gNS6kqe:kUmMkKC7daiU0UsVaScxBamO

content/type: PDF document, version 1.7

analysis time: 27.67 s

Analysis: Malware [54] Beta OpenIOC

1.0 @ 10: pdf.exploit Sandbox Bypass CVE-2013-0641

1.0 @ 10: suspicious.warning: object contains JavaScript

1.0 @ 10: suspicious.obfuscation using app.setTimeOut to eval code

1.0 @ 10: suspicious.obfuscation using substring

1.0 @ 10: suspicious.obfuscation using eval

1.0 @ 10: suspicious.obfuscation toString

1.0 @ 10: suspicious.obfuscation using String.replace

1.0 @ 10: suspicious.obfuscation using charCodeAt