Malicious PDF — malware analysis report

Heuristics 4

• Embedded script payload in PDF stream high PDF_EMBEDDED_SCRIPT_PAYLOAD
  PDF stream bytes contain script execution markers such as ActiveXObject/CreateObject, WScript.Shell, PowerShell, or shell-exec primitives. This is stronger than ordinary PDF JavaScript because it indicates a staged external script payload hidden in stream bytes.
• Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
  One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://www.gorillawalker.com/die-meistersinger-von-n-rnberg-wwv-96-chorus-score-a3154.pdf

  • http://www.gorillawalker.com/my-first-book-of-portuguese-words-bilingual-picture-dictionaries-multilingual.pdf
  • http://www.gorillawalker.com/the-romantic-a-novel.pdf
  • http://www.gorillawalker.com/the-last-zombie-inferno-gn-2-the-last-zombie-inferno.pdf
  • http://www.gorillawalker.com/fusion-management-harnessing-the-power-of-six-sigma-lean-iso.pdf
  • http://www.gorillawalker.com/natural-enemies-of-terrestrial-molluscs.pdf
  • http://www.gorillawalker.com/jersey-city-new-jersey-images-of-america-arcadia-publishing.pdf
  • http://www.gorillawalker.com/coming-of-age-in-samoa-a-psychological-study-of-primitive.pdf
  • http://www.gorillawalker.com/introduction-to-embedded-systems-using-microcontrollers-and-the-msp430.pdf
  • http://www.gorillawalker.com/what-is-good-the-search-for-the-best-way-to.pdf
  • http://www.gorillawalker.com/morimoto-the-new-art-of-japanese-cooking-morimoto-os.pdf
  • http://www.gorillawalker.com/opposing-viewpoints-series-sports-and-athletes-paperback-edition-opposing-viewpoints.pdf
  • http://www.gorillawalker.com/vacaciones-en-espanol-2-holidays-in-spanish-2-el-camino.pdf
  • http://www.gorillawalker.com/brainiac-adventures-in-the-curious-competitive-compulsive-world-of-trivia.pdf
  • http://www.gorillawalker.com/food-production-and-crisis-in-the-west-african-savannah-australian.pdf
  • http://www.gorillawalker.com/principles-of-cardiac-and-vascular-computed-tomography-1e-principles-of.pdf
  • http://www.gorillawalker.com/primordial-characters.pdf
  • http://www.gorillawalker.com/responding-to-literature-a-step-by-step-guide-for-student.pdf
  • http://www.gorillawalker.com/gilberto-freyre-social-theory-in-the-tropics-the-past-in.pdf
  • http://www.gorillawalker.com/matsuya-japanese-crest-designs-cd-rom-and-book-dover-electronic.pdf
  • http://www.gorillawalker.com/mcat-quick-review-anatomy-physiology-word-roots-quick-review-notes.pdf
  • http://www.gorillawalker.com/das-rheingold-libretto-german-edition.pdf
  • http://www.gorillawalker.com/does-god-listen-to-rap-christians-and-the-world-s.pdf
  • http://www.gorillawalker.com/artemisia-gentileschi-the-language-of-painting.pdf
  • http://www.gorillawalker.com/chinese-medicine-and-intercultural-philosophy-theory-methodology-and-structure-of.pdf
  • http://www.gorillawalker.com/mel-bay-93235-electric-bass-method-volume-2-book.pdf
  • http://www.gorillawalker.com/agnosticism-a-very-short-introduction.pdf
  • http://www.gorillawalker.com/the-little-book-of-color-healing-energy.pdf
  • http://www.gorillawalker.com/green-cities-of-europe-global-lessons-on-green-urbanism.pdf
  • http://www.gorillawalker.com/an-introduction-to-geographical-information-systems-3rd-edition.pdf
  • http://www.gorillawalker.com/futanari-paradise-futa-on-female-female-on-female-menage-shemale.pdf
  • http://www.gorillawalker.com/clinical-neurosonography-ultrasound-of-the-central-nervous-system.pdf
  • http://www.gorillawalker.com/commercial-arbitration.pdf
  • http://www.gorillawalker.com/the-sound-of-war-memoirs-of-a-cbc-correspondent.pdf
  • http://www.gorillawalker.com/once-tempted-a-silver-creek-novel.pdf
  • http://www.gorillawalker.com/when-the-giants-were-giants-bill-terry-and-the-golden.pdf
  • http://www.gorillawalker.com/algeria-an-entry-from-charles-scribner-s-sons-africa-an.pdf
  • http://www.gorillawalker.com/nursing-assistant-student-manual-2004-6th-edition.pdf
  • http://www.gorillawalker.com/practical-outboard-motorboat-building-and-operation-its-history-and-development.pdf
  • http://www.gorillawalker.com/weiss-ratings-guide-to-life-health-and-annuity-insurers-summer.pdf
  • http://www.gorillawalker.com/jersey-city-new-jersey-images-of-ameri
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • http://purl.org/dc/elements/1.1/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/pdf/1.3/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://www.aiim.org/pdfa/ns/extension/
  • http://www.aiim.org/pdfa/ns/schema#
  • http://www.aiim.org/pdfa/ns/property#
  • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.