Malware Minute - PDF Analysis
Want to learn how to check if a PDF is potentially malicious? We got you! In this short we explore two tools pdfid and peepdf. We will explore these tools and others in our upcoming full segments on malware analysis coming soon!
Commands:
python3 pdfid.py malicious.pdf | egrep -i "js|obj|script|action"
python3 pdfid.py malicious.pdf
peepdf malicious.pdf
If the above command is installed in your path, simply remove the python3 before the command.