ghidra let me know that the McCankles pdf is composed of image embeds… those images have steganography
$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz #3R&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
ghidra let me know that the McCankles pdf is composed of image embeds… those images have steganography
$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz #3R&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
open pdf in ghidra, select a platform, I used 64 bit gcc, run the auto analysis, then select the text adn press "D" to disassemble, check your definded data ouputs. You will see a list of images.
you can use xpdf's pdfimages exporter to acquire the files.