unable to decode streams in pdf

[binary]

Hi Guys,

I was laying my hands on a malicious pdf and was unable to decode the streams either using pdf-parser or using pdftk. Pls can you have a look at it.

Password - infected

[SysAdMini]

pdf-parser decodes the fike properly. After decoding you find 5 JS sections.

[binary]

Is it highly obfuscated?

[SysAdMini]

Is it highly obfuscated?

Nothing special.

[binary]

lolz yes,

hxxp://embrari-2.cn/giri/update.php?id=5 and the id keeps rotating

Thanks
Binary

[binary]

I was just wondering what that other things mean?

There were three distinct sects of '\x??' on the file.... Is it added just like that or does it mean something?