Malicious PDF — malware analysis report

Static analysis result for SHA-256 1a337521dad2d870…

MALICIOUS

PDF

8.3 KB
MD5: 33b735f6834ed1bbbf5f2cfe251c7bb3 SHA-1: 991f060bcd7901a3b83409db1731e153e8f6467c SHA-256: 1a337521dad2d870b97286c1f052563b1745435aca41dd9f3c8fe53c4c430611
76 Risk Score

Malware Insights

The PDF file contains embedded JavaScript, indicated by multiple heuristic firings related to PDF and JavaScript. ClamAV also flagged it with a critical heuristic for obfuscated objects, suggesting malicious intent. The embedded JavaScript is likely used to execute arbitrary code or download further malicious content.

Heuristics 3

  • ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.