PDF static analysis report

Static analysis result for SHA-256 1ccd9be3c7cce1e7…

CLEAN

PDF

64.1 KB Created: 2021-04-05 21:55:52 +07:00 Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2021-09-29
MD5: b95776c6810ef5de66aa3363bd6b189c SHA-1: 9b00d54065256e2b3fda0b1966c7c0be1d8c4741 SHA-256: 1ccd9be3c7cce1e7d09276a23aa8ece5fb803cf7ec1e24f367147f29b4d38f33
12 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.4394

Heuristics 3

  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://gaminggenerator.org/app/431946152/free-robux-roblox-com-mobile4free24 PDF link annotation
    • http://www.laborvetro.org/images/god-roblox-hack-script-fe.pdfIn PDF document text
    • http://artindex.pro/images/hptts-webrobloxcom-games-2021202114-getrobustfreehere.pdfIn PDF document text
    • http://www.fluidtech.hu/images/robux-cheat-2021.pdfIn PDF document text
    • https://www.cnte.org.br/images/robux-hack-descagar.pdfIn PDF document text
    • https://www.ergolight.at/images/roblox-rpg-hack.pdfIn PDF document text
    • https://reggieslockandkey.com/images/free-unlimited-robux-pastebin.pdfIn PDF document text
    • http://tegeler-segler.de/images/free-roblox-gift-card-codes-2021.pdfIn PDF document text
    • http://www.brtes.com/images/roblox-hack-2021-free-robux.pdfIn PDF document text
    • http://www.cosver.nl/images/god-hacks-roblox.pdfIn PDF document text
    • http://apostolosandreaslemesou.com/images/rainbow-antlerts-free-roblox.pdfIn PDF document text
    • http://sbm-nn.ru/images/how-get-free-stuff-on-roblox.pdfIn PDF document text
    • https://www.osoc.com/images/robux-hack-2021-phone.pdfIn PDF document text
    • https://laconce.com/images/roblox-dragon-ball-rage-hack-december-2021.pdfIn PDF document text
    • https://elite-house.su/images/hack-robux-with-no-gift-card.pdfIn PDF document text
    • http://www.exikom.com.ua/images/hacks-for-vehicle-simulator-on-roblox.pdfIn PDF document text
    • http://portal.crfsp.org.br/images/wwwroblox-hacksites.pdfIn PDF document text
    • http://bilhetim.com.br/images/goblin-v1-hack-roblox.pdfIn PDF document text
    • http://www.vktzunami.cz/images/hack-mega-matar-gente-roblox.pdfIn PDF document text
    • https://sitam.co.in/images/roblox-robux-money-hack-tool-generator.pdfIn PDF document text
    • http://rumler.pl/images/haw-to-get-free-robux-in-windows-7-2021.pdfIn PDF document text
    • http://prodajalec.si/images/roblox-scripts-free.pdfIn PDF document text
    • http://shiny-nn.ru/images/roblox-free-pastebin.pdfIn PDF document text
    • http://pourvosvacances.com/images/pase-bin-roblox-hack.pdfIn PDF document text
    • https://www.coriglianocalabro.it/images/roblox-a-free-virtual-world.pdfIn PDF document text
    • http://leigraphics.com/images/games-on-roblox-that-will-give-u-free-hat-youtubecom.pdfIn PDF document text
    • http://arch-centr.ru/images/free-gift-ard-pin-robux.pdfIn PDF document text
    • http://apartstmichel.com.ar/images/roblox-free-rthros.pdfIn PDF document text
    • http://dorfgaragethalwil.ch/images/how-do-i-get-free-robux-on-ipad.pdfIn PDF document text
    • http://jdlrelocation.com/images/usar-cheats-en-roblox.pdfIn PDF document text
    • https://www.inova-cuisine.fr/images/vheachle-simulator-cheats-roblox.pdfIn PDF document text
    • http://subarulegacy.com/images/cheat-pour-ultimate-driving-roblox.pdfIn PDF document text
    • http://museumkk.ru/images/free-robux-giveaway-groups.pdfIn PDF document text
    • http://tegeler-segler.de/images/free-obc-roblox-2021.pdfIn PDF document text
    • https://lesegais.ru/images/can-you-hack-peoples-roblox-credit.pdfIn PDF document text
    • http://agroturismoarkaia.com/images/how-tzo-hack-robux-links.pdfIn PDF document text
    • https://gomsa.nl/images/snack-factory-tycoon-roblox-hack-script.pdfIn PDF document text
    • http://xn--80aciiv6azczc.xn--p1ai/images/free-private-servers-roblox.pdfIn PDF document text
    • http://ohsawamacrobiotics.com/images/roblox-i-ts-free.pdfIn PDF document text
    • http://www.visiblefilm.com/images/free-roblox-accounts-with-robix.pdfIn PDF document text
    • http://domaizdereva24.ru/images/why-does-it-say-roblox-hacks-are-virus.pdfIn PDF document text
    • https://www.udivadlahotel.cz/images/robux-hack-in-game.pdfIn PDF document text
    • http://www.cosver.nl/images/free-robux-https-robuxplanet-com-r.pdfIn PDF document text
    • http://acktivities.com/images/pastebin-free-robux-fast.pdfIn PDF document text
    • http://energotestcontrol.ru/images/el-mayor-hacker-de-roblox.pdfIn PDF document text
    • https://www.devries-group.de/images/free-stuff-on-roblox-on-computer.pdfIn PDF document text
    • https://esl.ipb.ac.id/images/free-robux-code-genrator.pdfIn PDF document text
    • https://rieber-transporte.de/images/roblox-kostenlos-robux-hacken.pdfIn PDF document text
    • http://bkd1.balikpapan.go.id/images/how-to-get-free-robux-on-computer-2021.pdfIn PDF document text
    • http://www.drent.se/images/hacks-de-inspeccionar-de-roblox.pdfIn PDF document text
    +9 more URL(s)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off0000804a.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x804A 25720 bytes
SHA-256: 22568ee45261d8fc614222b4c9073fdf3b7d17fded2d9d373c3e9583e2152c83
font_01_sfnt_off0000bc58.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBC58 11440 bytes
SHA-256: 154d59d1680f2d1e38ccb783d6997f344290d121007e51df331726de4128c12e
font_02_sfnt_off0000d779.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD779 18240 bytes
SHA-256: a508722baaab87f2d99219a4c4ce2f37f1558a8be944963cc58b7da0670b6c28