JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link acd3d7617b6c268de173c20b7116a84377b5969b (Received 2018-06-13 03:24:14, APT9001.pdf )

URLStatus

All Malicious or Suspicious Elements of Submission

suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Length 129492
malicious: shellcode of length 20000/26212499
malicious: shellcode of length 1580/790
malicious: shellcode of length 1144/572
malicious: shellcode of length 1022/512
malicious: shellcode of length 2048/1024
malicious: shellcode of length 1538/770
malicious: shellcode of length 20000/36641374
malicious: shellcode of length 585116/292558
malicious: shellcode of length 516/258
malicious: shellcode of length 522708/261354
malicious: shellcode of length 612/306
upload malicious
[malicious:7] [PDF] upload
     info: [decodingLevel=0] JavaScript in PDF 5939 bytes, with 205 bytes headers
     info: [decodingLevel=1] found JavaScript
     suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Length 129492
     malicious: shellcode of length 20000/26212499
     malicious: shellcode of length 1580/790
     malicious: shellcode of length 1144/572
     malicious: shellcode of length 1022/512
     malicious: shellcode of length 2048/1024
     malicious: shellcode of length 1538/770
     malicious: shellcode of length 20000/36641374
     malicious: shellcode of length 585116/292558
     malicious: shellcode of length 516/258
     malicious: shellcode of length 522708/261354
     malicious: shellcode of length 612/306
     info: [2] no JavaScript
     info: file: saved upload to (58c93841ee644a5d2f5062bb755c6b9477ec6c0b)
     file: 58c93841ee644a5d2f5062bb755c6b9477ec6c0b: 21284 bytes
     file: 9bf776a01e19a75b7a351442d6e6f453228249b5: 6144 bytes
     file: 30a5ab555f9ec3d2022adb22393950a5f4f3851a: 3469720 bytes
     file: 180677601fdd4076c760243b53ae4bf402eb822f: 20000 bytes
     file: e5d0b3f33bd5c357133bb28bfddbc7b4bda1774b: 1580 bytes
     file: cbb80133b31485b97575ec9b1bb09142c077f7d9: 1144 bytes
     file: efb4494f5bc5ac46c10a60cfb58179b151c1cb6a: 1022 bytes
     file: 13de317bae1913d367e3911b5141fd317609f690: 2048 bytes
     file: 4eb0077d61ad0a40e967fb8fd4d51892b7865366: 1538 bytes
     file: da61fa7d6a8707b6f1037212906b2f2f9a2f7dd2: 20000 bytes
     file: 5ddae2e770c6a389144eaa5bc369c168239729d8: 585116 bytes
     file: 0ec2ee2708a90cc2645b854f97b1cd4624ae00fc: 516 bytes
     file: 37d91f91ce5227f6c69e1603503ca6c08c93c89a: 522708 bytes
     file: 70a0a16756197def50ec7a93f1be66a18bf97231: 612 bytes

Decoded Files
58c9/3841ee644a5d2f5062bb755c6b9477ec6c0b from upload (21284 bytes, 12360 hidden) download

9bf7/76a01e19a75b7a351442d6e6f453228249b5 from upload (6144 bytes, 317 hidden) download

30a5/ab555f9ec3d2022adb22393950a5f4f3851a from upload (3469720 bytes) download

1806/77601fdd4076c760243b53ae4bf402eb822f from upload (20000 bytes, 10000 hidden) download

e5d0/b3f33bd5c357133bb28bfddbc7b4bda1774b from upload (1580 bytes, 790 hidden) download

cbb8/0133b31485b97575ec9b1bb09142c077f7d9 from upload (1144 bytes, 572 hidden) download

efb4/494f5bc5ac46c10a60cfb58179b151c1cb6a from upload (1022 bytes, 515 hidden) download

13de/317bae1913d367e3911b5141fd317609f690 from upload (2048 bytes, 1024 hidden) download

4eb0/077d61ad0a40e967fb8fd4d51892b7865366 from upload (1538 bytes, 773 hidden) download

da61/fa7d6a8707b6f1037212906b2f2f9a2f7dd2 from upload (20000 bytes, 10000 hidden) download

5dda/e2e770c6a389144eaa5bc369c168239729d8 from upload (585116 bytes, 292558 hidden) download

0ec2/ee2708a90cc2645b854f97b1cd4624ae00fc from upload (516 bytes, 258 hidden) download

37d9/1f91ce5227f6c69e1603503ca6c08c93c89a from upload (522708 bytes, 261354 hidden) download

70a0/a16756197def50ec7a93f1be66a18bf97231 from upload (612 bytes, 306 hidden) download