JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 3b20ff2ef2b845077e160616145d9240c753ea5d (Received 2012-09-24 19:18:08, https://securesignupsite.com/signup/236/00/signup.php )

URLStatus
securesignupsite.com/signup/236/00/signup.php saved 15992 bytes 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5

sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/3922.jpg status: (referer=www.freeteenpassport.com/ui/js/navaway.php?s=98)

www.freeteenpassport.com/ui/js/jquery-126.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/swfobject.js status: (referer=www.freeteenpassport.com/signupforms/player.swf)

www.freeteenpassport.com/ui/js/signup.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/util.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/navaway.js status: (referer=www.freeteenpassport.com/signupforms/player.swf)

www.freelifetimepassport.com/?t=15673,5,136,1&x=ncself status: (referer=www.freeteenpassport.com/ui/js/navaway.php?s=98)

All Malicious or Suspicious Elements of Submission

None
securesignupsite.com/ui/js/images/movies/player.swf benign
[nothing detected] (embed) securesignupsite.com/ui/js/images/movies/player.swf
     status: (referer=securesignupsite.com/ui/js/util.js)saved 345 bytes 34540ffc5331cc545c1035b06a72b4f8d375973d
     info: [0] no JavaScript
     file: 34540ffc5331cc545c1035b06a72b4f8d375973d: 345 bytes

Decoded Files
3454/0ffc5331cc545c1035b06a72b4f8d375973d from securesignupsite.com/ui/js/images/movies/player.swf (345 bytes, 10 hidden) download


www.freeteenpassport.com/signupforms/player.swf benign
[nothing detected] (embed) www.freeteenpassport.com/signupforms/player.swf
     status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)saved 21023 bytes 80d7e18d669a5749c2c7cc7e82a4c8f4d9c7d038
     info: [script] www.freeteenpassport.com/ui/js/jquery-126.js
     info: [script] www.freeteenpassport.com/ui/js/util.js
     info: [script] www.freeteenpassport.com/ui/js/navaway.js
     info: [script] www.freeteenpassport.com/ui/js/swfobject.js
     info: [img] www.freeteenpassport.com/signupforms/images/01.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/02.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/03.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/04.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k6b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k7c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k69.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k62.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k97.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k8c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k17a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k78.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k10c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k8b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k95.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k11a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k19c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k96.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k111.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k93.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k81.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k94.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k14a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k9c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k66.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k91.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k18b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k2c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k15c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k89.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k1c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k4b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k104.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k108.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k14b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k101.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k63.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k7a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k102.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k99.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k106.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k2b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k19a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k71.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k3c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k114.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k65.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k1b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k9b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k15a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k16c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k17b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/over18.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:6: TypeError: Image is not a constructor
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN"
          error: line:3: ...............^
     file: 80d7e18d669a5749c2c7cc7e82a4c8f4d9c7d038: 21023 bytes

Decoded Files
80d7/e18d669a5749c2c7cc7e82a4c8f4d9c7d038 from www.freeteenpassport.com/signupforms/player.swf (21023 bytes, 1297 hidden) download


securesignupsite.com/signup/236/00/signup.php benign
[nothing detected] securesignupsite.com/signup/236/00/signup.php
     status: (referer=http:/www.ask.com/web?q=puppies)saved 15992 bytes 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5
     info: [script] securesignupsite.com/ui/js/jquery-126.js
     info: [script] securesignupsite.com/ui/js/signup.js
     info: [script] securesignupsite.com/ui/js/util.js
     info: [script] securesignupsite.com/ui/js/navaway.php?s=236
     info: [img] securesignupsite.com/signupforms/236_0/logo.png
     info: [img] securesignupsite.com/signupforms/236_0/r1.jpg
     info: [img] securesignupsite.com/signupforms/236_0/r2.jpg
     info: [input] securesignupsite.com/signupforms/236_0/21.png
     info: [img] securesignupsite.com/signupforms/236_0/r3.jpg
     info: [img] securesignupsite.com/signupforms/236_0/r4.jpg
     info: [img] securesignupsite.com/signupforms/236_0/03.png
     info: [img] securesignupsite.com/signupforms/236_0/05.png
     info: [img] securesignupsite.com/signupforms/236_0/07.png
     info: [img] securesignupsite.com/signupforms/236_0/09.png
     info: [img] securesignupsite.com/signupforms/236_0/11.png
     info: [img] securesignupsite.com/signupforms/236_0/13.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3.org/TR/html4/loose.dtd">
          error: line:3: ...............^
     file: 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5: 15992 bytes

Decoded Files
4fdf/301a6ae6aa02a4c82a1df425b9565c13bbf5 from securesignupsite.com/signup/236/00/signup.php (15992 bytes, 553 hidden) download