Filed under: PDF,Puzzle — Didier Stevens @ 9:39
The Win7 puzzle is actually a “PDF bomb”,
Office 2010 Standard Product Key Rootkit Unhooker Win7,
Office 2010 Key Sale, something I’ve hinted at long ago but I hadn’t published a sample.
The PDF contains a doubly compressed object stream,
Windows 7 Ultimate 64, which is around 100 MB large when uncompressed. Some of you might have experienced problems opening this PDF file in your favorite PDF reader,
Office 2010 Key, this is because it couldn’t handle an uncompressed stream of 100 MB. Which isn’t actually that large,
Office Home And Student 2010 Key, a PDF bomb of 1 GB or 10 GB isn’t that much larger in compressed form…
If you used my pdf-parser,
Office 2010, you’ve also encountered a problem. The objects lack the endobj keyword. A simple solution: add the missing keyword and extract the stream with my parser. The stream is 100 MB of spaces, with a small text in the middle: “De Ultieme Hallucinatie”. One way to extract this text is to trim the spaces of the 100 MB string.
If you’re interested in different solutions, be sure to read the comments of the Win7 Puzzle.
De Ultieme Hallucinatie (The Ultimate Hallucination) was a nice Art Nouveau cafe/restaurant in Brussels. But the
Windows 7 Ultimate license won by Vincent is no ultimate hallucination
Office 2010 Key Sale t actually that large
Linear Mode
