Skip to content
Zien Zidan
Back to Forensic Digital

// case study

PDF malware analysis

Dissecting a malicious PDF: embedded JavaScript and an OpenAction that launches commands.

Context

A digital forensics project from my previous portfolio (2024).

What I did

  • Inspected the structure of sample.pdf with PDForensic.
  • Found an embedded file, JavaScript, and an /OpenAction + /Launch that calls cmd.exe to locate and open form.pdf in the user's folders.
  • The analysis flagged the file as malicious with a 100% score.
ProjectsBack to Forensic DigitalNext project in this categoryFile recovery with Autopsy