PDF static analysis report

Static analysis result for SHA-256 cbdd8c34b8ec377f…

CLEAN

PDF

62.6 KB Created: 2021-04-05 19:24:59 +07:00 Authoring application: wkhtmltopdf 0.12.6 (via Qt 4.8.7) First seen: 2021-10-07
MD5: 5fbaf5dee4bc85979caabe793d0c984d SHA-1: 714c5b16d87497b4a2fb59a7c8a22910b82c64ec SHA-256: cbdd8c34b8ec377fbb9e0354612984999bbbfd863f49bb3db0afc6a90e1e7d28
20 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.4394

Heuristics 4

  • Urgency / deadline lure low SE_URGENCY_LURE
    Document contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://gaminggenerator.org/app/431946152/are-roblox-emotes-free PDF link annotation
    • http://principessalialaofegypt.com/images/tuto-comment-hack-robux.pdfIn PDF document text
    • http://kruiz21.ru/images/how-to-cheat-roblox-jailbreak-glitches.pdfIn PDF document text
    • https://gryps.de/images/roblox-dragon-ball-online-stats-hack.pdfIn PDF document text
    • http://bc97.de/images/tower-of-hell-roblox-fly-hack.pdfIn PDF document text
    • https://www.nema.go.ke/images/roblox-snowman-package-free.pdfIn PDF document text
    • https://pa-waingapu.go.id/images/how-to-hack-meep-city-roblox-money-2021.pdfIn PDF document text
    • http://www.vktzunami.cz/images/free-robux-codes-december-2021.pdfIn PDF document text
    • https://www.ausecus.com/images/how-to-cheat-in-roblox-pet-simulator-2021.pdfIn PDF document text
    • https://ballaratcaravans.com.au/images/list-of-roblox-cheat-engines.pdfIn PDF document text
    • http://w-i-r.de/images/hacking-roblox-with-cheat-engine-64.pdfIn PDF document text
    • https://kimolos-link.gr/images/how-to-hack-on-jailbreak-roblox-2021.pdfIn PDF document text
    • https://kimolos-link.gr/images/roblox-prison-life-hack-script.pdfIn PDF document text
    • http://www.jureclomas.com.ar/images/how-to-get-free-robux-survey.pdfIn PDF document text
    • http://dottgagliardi.com/images/free-ways-to-get-free-robux.pdfIn PDF document text
    • http://jwcrownlimo.net/images/hack-indir-roblox.pdfIn PDF document text
    • http://torkelson.se/images/el-mejor-hack-de-roblox.pdfIn PDF document text
    • http://k2visual.com.br/images/roblox-jailbreajk-new-hack.pdfIn PDF document text
    • https://waterpark.by:443/images/cheat-engine-roblox-shut-down.pdfIn PDF document text
    • https://www.romedia.gr/images/roblox-hack-robux-gratis.pdfIn PDF document text
    • https://www.ghknights.org/images/vip-server-roblox-free.pdfIn PDF document text
    • http://www.evaplast.by/images/roblox-free-black-adidas-t-shirt.pdfIn PDF document text
    • https://seedungo.com/images/roblox-hack-download-jailbreak-2021.pdfIn PDF document text
    • http://www.agri-tech.com.au/images/free-robux-no-inspect.pdfIn PDF document text
    • https://www.lavigny.ch/images/razzberry-cheat-roblox.pdfIn PDF document text
    • http://legs11.co.za/images/free-level-6-exploits-roblox.pdfIn PDF document text
    • http://www.remiauclair.fr/images/can-you-make-free-pants-on-roblox.pdfIn PDF document text
    • https://www.porthos.it/images/how-do-doload-hacks-in-roblox.pdfIn PDF document text
    • http://vagency.us/images/free-roblox-jailbreak-vip-server-link-desc.pdfIn PDF document text
    • http://agrupamentoescolas-alfredo-da-silva.com/images/jailbreak-roblox-cheats.pdfIn PDF document text
    • http://piadaandco.it/images/roblox-games-that-give-you-robux-for-free.pdfIn PDF document text
    • https://gafaseo.com/images/roblox-unban-account-hack.pdfIn PDF document text
    • http://modenese.net/images/greenville-roblox-money-hack.pdfIn PDF document text
    • http://batutynas.lt/images/comment-avoir-des-robux-gratuitement-sans-hack.pdfIn PDF document text
    • http://learningarabic.co.uk/images/roblox-free-robux-obby-working-100.pdfIn PDF document text
    • https://www.dierenartsberghman.be/images/robux-gratis-hack-android.pdfIn PDF document text
    • http://demenagementlandry.com/images/el-mejor-hack-para-roblox-marzo-2021.pdfIn PDF document text
    • https://www.abrapppe.org.br/images/hack-para-roblox-jailbreak.pdfIn PDF document text
    • https://rieber-transporte.de/images/roblox-cheat-engine-alternative.pdfIn PDF document text
    • https://inspiration-modellbau.de/images/roblox-games-to-hack.pdfIn PDF document text
    • http://www.hawler.in/images/roblox-free-pants-and-shirt-president.pdfIn PDF document text
    • http://junktiquecollector.com/images/roblox-tokyo-ghoul-bloody-nights-level-hack.pdfIn PDF document text
    • https://www.hbproducts.dk/images/give-badge-hack-roblox.pdfIn PDF document text
    • http://hindicenter.com/images/free-robux-codes-generator-free-robux-codes-2021.pdfIn PDF document text
    • https://blagvist.com.ua/images/roblox-hacked-with-2-factor-authenaticatio.pdfIn PDF document text
    • http://unionmusicaldebenidorm.com/images/case-clicker-hack-2021-roblox.pdfIn PDF document text
    • http://smart-pro.co.uk/images/how-to-become-a-hacker-on-roblox-jailbreak.pdfIn PDF document text
    • http://pa-tanjungselor.go.id/images/roblox-parche-cheat-engine.pdfIn PDF document text
    • http://pandaplast.com/images/cheat-codes-for-ninja-assassin-roblox.pdfIn PDF document text
    • https://www.albisser.ch/images/how-to-get-a-free-dominus-roblox.pdfIn PDF document text
    +15 more URL(s)

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off000084f4.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x84F4 29436 bytes
SHA-256: 9b707600120798c1aebf9422764dd2d64fb95302024fc484d7c7045a44d118d8
font_01_sfnt_off0000c950.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xC950 2848 bytes
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1
font_02_sfnt_off0000d311.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xD311 17736 bytes
SHA-256: 36c9cb988ddf8c26ea222d43132f07fd155d06106f194854f8f3dea71bcc52b9