Worst Social Engineering Ever

From a recent submission via the email intake - hereyougo at vicheck.ca:

With a subject line of a invitation to a Tibetan event, invitation.rar (3026984137716828cf8f55b10bb0069) contained the aptly named "exploit.pdf" which certainly inspires confidence to open the attachment:

exploit.pdf:
EXECUTABLE SCAN: PDF Exploit Embedded Flash may be CVE-2010-1297 (genexploit/full)
REPORT: https://www.vicheck.ca/md5query.php?hash=ee81327f15db183f83815754fbfad5dd
Exploit method detected as genexploit - PDF Exploit Embedded Flash may be CVE-2010-1297.
Confidence ranking: 100 (11 hits).

Embedded EXE is encrypted with a 256 byte key as well as a simple replacement cipher.

Drops:

c:\a.exe 23876a91a7510e5c39e39670f5b9343d	72560 bytes
c:\a.pdf 36710aef65cf5b4ccae81b2842821dbd	1243 bytes
C:\[WINDOWS]\system32\srvlic.dll e94e4e5023c51a7a37a02a3db5802944	20480 bytes
C:\[WINDOWS]\fxsst.dll da0ce7a6c134d45e63c61c301ba13c25	40960 bytes