This is an ongoing blogpost on how to analyse malicious PDF files... More information coming soon...
Content coming soon!
[...]
Source of PDF:
http://stopmalvertising.com/malvertisements/malvertisement-on-filestube-meet-cve-2013-0422-and-cve-2012-1723.html
test.pdf
https://www.malwaretracker.com/pdfsearch.php?hash=00cb4b06783620a997c673acc9496032
https://www.virustotal.com/file/26e3357a689437e469887aa1960533da8148eaa976a4ca4fa2e88a16a025fd7a/analysis/1358951918/
http://wepawet.iseclab.org/view.php?hash=00cb4b06783620a997c673acc9496032&type=js&t=1358889498
http://jsunpack.jeek.org/?report=516115790568fd46e1f72c952074a64755947796
Extracted
shellcode.js
https://www.virustotal.com/file/cf89cc1cb5919f85651ed9e66983fc9e4b6d27d3a1f6ccc090af70beee0994a5/analysis/
http://wepawet.iseclab.org/view.php?hash=fb436428b41ecfddc9163c3aae4344b3&type=js
Thursday, January 24, 2013
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment