Files for Content Filter Download
Message Files
1. NWS file with an executable which analyses the computer t) (emltest_d.nws) *************************TODO******************************
2. Outlook message file with calc.exe (OutlookMSG_calc_embedded_attachment.msg)
3. Outlook message unicode file with calc.exe (OutlookMSG_calc_embedded_attachment_unicode.msg)
4. Outlook template file with (calc.exe) (OutlookMSG_calc_embedded_attachment.oft)
5. EML file with an executable which analyses the computer (virus-detect) (emltest_d.eml) ********************TODO***************
6. Outlook message in Rich Text format with DDE(outlook_mesg_with_dde.msg) ********************************still working?********
Binary
1. calc.exe (OriginalCalc.exe)
2. UPX Packed Setup.exe File (UPX_packed_pec2setup.exe)
3. Screensaver Mystify.scr(OriginalSsflwbox.scr)
4. edit.com (EDIT.COM) TODO ******NOT FOUND in a timely manner ******
5. PECompacted calc.exe(PE_Compact_calc.exe
6. HTTP Tunnel htc.exe (OriginalHtc.exe) TODO ******NOT FOUND in a timely manner ******
7. Control panel applet TimeDate.cpl(Timedate.cpl)
Office Files Manual
1. Normal Word Doc , docx (WordDoc_Normal.docx)
2. Normal Word Doc , mht (WordDoc_Normal.mht)
3. Normal Word Doc , xml (WordDoc_Normal.xml)
4. Normal Word Doc , doc (WordDoc_Normal.doc)
5. Normal Word Doc , dotx (WordDoc_Normal.dotx)
6. Normal Word Doc ,rtf (WordDoc_Normal.rtf)
7. Macro Word Doc, docm (WordDoc_with_Marco.docm)
8. Macro Word Doc, dotm(WordDoc_with_Marco.dotm)
9. Marco Word Doc, docx (WordDoc_with_Marco.docx)
10. Macro Word Doc, doc (WordDoc_with_Marco.docWordDoc_with_Marco.doc)
11. Calc.exe embedded as OLE Object in Word Doc, rtf (WordDoc_Calc_embedded_OLE.rtf)
12. Calc.exe embedded as OLE Object in Word Doc, doc (WordDoc_Calc_embedded_OLE.doc)
13. Calc.exe embedded as OLE Object in Word Doc, dot (WordDoc_Calc_embedded_OLE.dotx)
14. Calc.exe embedded as OLE Object in Word Doc, mht (WordDoc_Calc_embedded_OLE.mht)
15. Calc.exe embedded as OLE Object in Word Doc, xml (WordDoc_Calc_embedded_OLE.xml)
16. Calc.exe embedded as OLE Object in Word Doc, docx (WordDoc_Calc_embedded_OLE.docx)
17. Calc.exe embedded inline in Word Doc, rtf (WordDoc_Calc_embedded_inline.rtf)
18. Calc.exe embedded inline in Word Doc, doc (WordDoc_Calc_embedded_inline.doc)
19. Calc.exe embedded inline in Word Doc, dotx (WordDoc_Calc_embedded_inline.dotx)
20. Calc.exe embedded inline in Word Doc, mht (WordDoc_Calc_embedded_inline.mht)
21. Calc.exe embedded inline in Word Doc, xml (WordDoc_Calc_embedded_inline.xml)
22. Calc exe embedded inline in Word Doc, docx (WordDoc_Calc_embedded_inline.docx)
23.CSV File with Formulas (CSV_with_Formula.csv)
24. Excel XLS File with macro, xlsm(ExcelXls_with_marco.xlsm)
25. Excel XLS File with macro, xls(ExcelXls_with_marco.xls)
26. Excel XLS File with macro, xltm(ExcelXls_with_marco.xltm")
Office Files with LuckyStrike
27. WordDoc_Calc_shellc_via_shellcommand_ls.dotm
28. WordDoc_Calc_shellc_via_shellcommand_ls.doc
29. WordDoc_Calc_shellc_via_metadata_ls.doc
30. ExcelXls_Calc_shellc_via_shellcommand_ls.xls
31. ExcelXls_Calc_shellc_via_metadata_ls.xls
32. ExcelXls_Calc_shellc_via_dde_ls.xls
33. ExcelXls_Calc_PS_via_cell-embeded_ls.xls
34. ExcelXls_Calc_PS_via_cell-embeded-obfuscated_ls.xls
35.ExcelXls_Calc_PS_via_cell-embeded-nonB64_ls.xls
36.ExcelXls_Calc_PS_via_cell-embeded-encrypted-administral_ls.xls
37.ExcelXls_Calc_EXE_via_SavetoDisk_ls.xls
38.ExcelXls_Calc_EXE_via_ReflectivePE_ls.xls
39.ExcelXls_Calc_EXE_via_certui_ls.xls
40.
41.
42.
43.
44.
45.
46.
47.
Office Various Files
X. RTF File with webdav_exec (CVE-2017-11882)(CVE-2017-11882_exploit.rtf)
X. calc.exe embedded as DDE object in a WordDocument, docx. (WordDoc_Calc_embedded_DDE.docx)
X. Normal PDF, pdf (PDF_Normal.pdf)
Archive // never run these files
1. LZH_with_exe (calc.exe)
2. TAR_with_exe (calc.exe)
3. zip_with_exe (calc.exe)
4. ace_with_exe (calc.exe) TODO ******NOT FOUND in a timely manner ******
5. Nested Archive File.rar (calc.exe)TODO ******NOT FOUND in a timely manner ******
6. ARJ_with_exe (calc.exe)
7. GZIP_with_exe (calc.exe)
8. BZIP2(TAR)_with_exe (calc.exe)
9. Z_TAR_with_exe (calc.exe)
10. ISO_with_exe (calc.exe)TODO
11. RAR_with_exe (calc.exe)
12. UUENCODE _with_exe (calc.exe)
13. LARGE ARCHIVE FILE TODO ******NOT FOUND in a timely manner ******
14. CAB_with_exe (calc.exe)
15. ZIP BOMB (zipbomb.txt) DON'T EXTRACT
16. BZIP2_with_exe (calc.exe)
17. SIT_with_exe (calc.exe)(TODO)
18. GZIP(TAR)_with_exe (calc.exe)
19. Z_with_exe (calc.exe)(TODO)
20. xz_with_exe (calc.exe)
21. wim_with_exe (calc.exe)
22. 7z_with_exe (calc.exe)
23. LHA_with_exe (calc.exe)TODO
24. tar_with_exe (calc.exe)
?. Zip_with_WordDocument_With_exe (calc.exe)
Malicious
1. Eicar.com
2. Love-Letter.vbs
3. ActiveX (HelloWorld.ocx) TODO
4. Java Applets (DiskAccessApplet.html) TODO
5. Gobo (Gobo.exe) TODO
6. UPX Packed Gobo /gobo_upx_packed.exe) TODO
7. Visual Basic Script (DiskAccess.html)TODO
Script
1. Batch File (batch.bat)
2. Command File (batch.cmd)
3. Inf File (drif.inf)
4.VBS File (helloworld.vbs)
5. Link zu CMD (Command Prompt.lnk)
6.PIF Link (crap.PIF)
7.Registry Eintrag (nohting.reg)
8.HTA file (example3.hta)
9.URL Datei (bckseb.li)
10.Faked Filetype wie erstellen?
System
1. DOS real mode device drivers (null.sys)
2. Windows driver (winspool.drv)
3. Windows virtual device driver (dsound.vxd)
4. Windows Dynamic Link Library (winsockhc.dll)
5. Windows 3.x font library (ssef1257.fon)
Sandbox
3. wim_with_exe (calc.exe)
Blocked URLs
Create some Gambling Links
Create some prn Links
Create some remote control Links
Create some webmail Links
Create some advertisement Links
Create some hacking Links
Create some proxies / anonymizer Links
Create some Warez / serial / Cracks Links