PDF static analysis report

Static analysis result for SHA-256 8793c8de2ee958dd…

CLEAN

PDF

64.3 KB Created: 2021-04-05 21:39:35 +07:00 Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2021-09-27
MD5: 8a98797897d37175e2f01c3b17c0c9a1 SHA-1: 1ad81e35ce850b38bb87e64ee7d69b6d0de6e1e2 SHA-256: 8793c8de2ee958ddf80a663e8ef8e82e0922347d4c89ba1c8f6d48e8efb18888
12 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.4394

Heuristics 3

  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://gaminggenerator.org/app/431946152/free-synapse-x-roblox-2021 PDF link annotation
    • http://www.friendshiptransport.net/images/free-robux-com.pdfIn PDF document text
    • http://jdlrelocation.com/images/earn-free-roblox-jailbreak-money.pdfIn PDF document text
    • https://www.osoc.com/images/free-robux-jezz-tec.pdfIn PDF document text
    • http://www.viniperfetti.com/images/youtube-how-to-get-free-hair-on-roblox.pdfIn PDF document text
    • http://easytransferbrazil.com/images/how-to-hack-roblox-with-inspect-element-2021.pdfIn PDF document text
    • http://oddgraphic.com/images/how-to-get-a-dominus-for-free-in-roblox.pdfIn PDF document text
    • http://www.apocalissedigesucristo.com/images/roblox-hack-ingame.pdfIn PDF document text
    • http://pia2000.net/images/how-to-hack-roblox-accounts-2021.pdfIn PDF document text
    • https://verdensbarn.no/images/roblox-hack-2021-may.pdfIn PDF document text
    • https://www.air-shop.cz/images/fnaf-roblox-songs-cheats.pdfIn PDF document text
    • http://energotestcontrol.ru/images/how-to-noclip-hack-in-roblox-2021.pdfIn PDF document text
    • http://www.sapaengineering.kz/images/free-roblox-giftcards-not-used-100-80.pdfIn PDF document text
    • http://modlingua.com/images/how-get-free-robux-2021.pdfIn PDF document text
    • http://bagna.pl/images/synapse-roblox-exploit-download-free.pdfIn PDF document text
    • https://www.saisystem.it/images/free-robux-by-changing-the-code.pdfIn PDF document text
    • http://www.sanjosedeminas.gob.ec/images/free-robux-no-typing-stuff.pdfIn PDF document text
    • http://alexandrion.com/images/roblox-retail-tycoon-116-infinite-money-hack.pdfIn PDF document text
    • https://www.hotschool.com.au/images/roblox-cheat-codes.pdfIn PDF document text
    • http://pisanie-nut.pl/images/how-do-you-get-robux-for-free-2021.pdfIn PDF document text
    • http://cekmekoygundem.com/images/get-free-robux-generator-com.pdfIn PDF document text
    • https://kimolos-link.gr/images/cheat-engine-original-download-roblox.pdfIn PDF document text
    • https://jdlgroup.ca/images/roblox-card-free-robux.pdfIn PDF document text
    • http://www.anies.eu/images/free-valid-promo-codes-generator-roblox.pdfIn PDF document text
    • https://europe-upkl.eu/images/how-dto-hack-in-to-robloxs-account.pdfIn PDF document text
    • http://facingachild.org/images/bloxpage-free-robux.pdfIn PDF document text
    • http://www.les2alpes-location.com/images/admin-command-hack-guide-roblox.pdfIn PDF document text
    • http://www.exikom.com.ua/images/hacker-names-roblox.pdfIn PDF document text
    • https://ballaratcaravans.com.au/images/hack-builderman-roblox.pdfIn PDF document text
    • https://www.cpnf.ch/images/show-me-a-picture-of-a-hacked-roblox-account.pdfIn PDF document text
    • http://kruiz21.ru/images/4chan-roblox-hack.pdfIn PDF document text
    • http://osteonad.com/images/how-to-hack-roblox-accounts-may-2021.pdfIn PDF document text
    • http://armatrutz.de/images/how-to-hack-someone-on-roblox-ipad.pdfIn PDF document text
    • http://rushxpress.de/images/roblox-mod-hack-robux.pdfIn PDF document text
    • https://sanjoseelectricians.net/images/monaco-base-roblox-hack.pdfIn PDF document text
    • https://www.colditex.com/images/programas-para-hackear-roblox.pdfIn PDF document text
    • http://ivpr.net/images/how-to-get-free-roblox-on-roblox.pdfIn PDF document text
    • https://www.stoehr-sauer.de/images/free-robux-with-codes.pdfIn PDF document text
    • http://serviio.org/images/make-roblox-shirts-free.pdfIn PDF document text
    • https://www.hofe-gmbh.de/images/roblox-hacker-code-fr-redline.pdfIn PDF document text
    • http://sandra-masemann.de/images/roblox-murder-mystery-2-hack-script.pdfIn PDF document text
    • https://www.tsdb.com.au/images/how-to-hack-roblox-highschool-money.pdfIn PDF document text
    • https://www.dierenartsberghman.be/images/roblox-free-robux-promo-codes-2021.pdfIn PDF document text
    • http://clinicadentalvilaplana.es/images/robux-hack-computer-only.pdfIn PDF document text
    • http://amtabor2.at/images/free-robux-si.pdfIn PDF document text
    • http://ghhs.com.my/images/cheat-engine-roblox-mad-city.pdfIn PDF document text
    • https://pa-waingapu.go.id/images/roblox-make-a-cake-hack.pdfIn PDF document text
    • http://www.inservis.cl/images/free-roblox-exploit-that-lets-you-use-gears.pdfIn PDF document text
    • http://fairwaygolftravel.co.uk/images/free-robux-codes-no-verfacation-no-survey.pdfIn PDF document text
    • http://arcnjournals.org/images/spiderman-stuff-on-roblox-free.pdfIn PDF document text
    +11 more URL(s)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
font_00_sfnt_off00008323.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8323 24968 bytes
SHA-256: 29ff86d8298a58de944b37fae34f762e18f1bd12060848c1aa2bccc2142c19c2
font_01_sfnt_off0000bc15.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBC15 11440 bytes
SHA-256: 154d59d1680f2d1e38ccb783d6997f344290d121007e51df331726de4128c12e
font_02_sfnt_off0000d735.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD735 18520 bytes
SHA-256: 0d23c27274e6246e74bee99f4ebb0cddb06d38973c60d8b6b7444d7d4df6763f