Extract javascript from pdf file

[MysteryFCM]

The JS is in plain text in the PDF, so just needs a little cleanup, no de-obfuscating. It also doesn't actually install anything. Just seems to be a PoC for a stack overflow (checking on this confirms it).

[sgres]

Hi,

Thanks for the reply.
 
The problem is that the javascript is encoded in brackets '['! and I don't know how to convert them to plain text.

Another question that I have is that how can I decode UCS2 to binary or hex? and how can I encode my shellcode in UCS2?

Thanks

sgres

[SysAdMini]

Another question that I have is that how can I decode UCS2 to binary or hex?

Malzilla

[MysteryFCM]

and how can I encode my shellcode in UCS2?

We aren't here to help malware authors .... we're here to stop them.