JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 3b20ff2ef2b845077e160616145d9240c753ea5d (Received 2012-09-24 19:18:08, https://securesignupsite.com/signup/236/00/signup.php )

URLStatus
securesignupsite.com/signup/236/00/signup.php saved 15992 bytes 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5

sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/3922.jpg status: (referer=www.freeteenpassport.com/ui/js/navaway.php?s=98)

www.freeteenpassport.com/ui/js/jquery-126.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/swfobject.js status: (referer=www.freeteenpassport.com/signupforms/player.swf)

www.freeteenpassport.com/ui/js/signup.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/util.js status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)

www.freeteenpassport.com/ui/js/navaway.js status: (referer=www.freeteenpassport.com/signupforms/player.swf)

www.freelifetimepassport.com/?t=15673,5,136,1&x=ncself status: (referer=www.freeteenpassport.com/ui/js/navaway.php?s=98)

All Malicious or Suspicious Elements of Submission

None
securesignupsite.com/ui/js/images/movies/player.swf benign
[nothing detected] (embed) securesignupsite.com/ui/js/images/movies/player.swf
     status: (referer=securesignupsite.com/ui/js/util.js)saved 345 bytes 34540ffc5331cc545c1035b06a72b4f8d375973d
     info: [0] no JavaScript
     file: 34540ffc5331cc545c1035b06a72b4f8d375973d: 345 bytes

Decoded Files
3454/0ffc5331cc545c1035b06a72b4f8d375973d from securesignupsite.com/ui/js/images/movies/player.swf (345 bytes, 10 hidden) download


www.freeteenpassport.com/signupforms/player.swf benign
[nothing detected] (embed) www.freeteenpassport.com/signupforms/player.swf
     status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)saved 21023 bytes 80d7e18d669a5749c2c7cc7e82a4c8f4d9c7d038
     info: [script] www.freeteenpassport.com/ui/js/jquery-126.js
     info: [script] www.freeteenpassport.com/ui/js/util.js
     info: [script] www.freeteenpassport.com/ui/js/navaway.js
     info: [script] www.freeteenpassport.com/ui/js/swfobject.js
     info: [img] www.freeteenpassport.com/signupforms/images/01.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/02.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/03.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/04.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k6b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k7c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k69.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k62.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k97.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k8c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k17a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k78.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k10c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k8b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k95.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k11a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k19c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k96.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k111.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k93.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k81.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k94.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k14a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k9c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k66.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k91.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k18b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k2c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k15c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k89.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k1c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k4b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k104.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k108.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k14b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k101.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k63.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k7a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k102.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k12a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k99.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k106.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k2b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k19a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k71.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k3c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k114.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k65.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k13c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k1b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k9b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k15a.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k16c.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/k17b.jpg
     info: [img] www.freeteenpassport.com/signupforms/images/over18.gif
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:6: TypeError: Image is not a constructor
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN"
          error: line:3: ...............^
     file: 80d7e18d669a5749c2c7cc7e82a4c8f4d9c7d038: 21023 bytes

Decoded Files
80d7/e18d669a5749c2c7cc7e82a4c8f4d9c7d038 from www.freeteenpassport.com/signupforms/player.swf (21023 bytes, 1297 hidden) download


securesignupsite.com/signup/236/00/signup.php benign
[nothing detected] securesignupsite.com/signup/236/00/signup.php
     status: (referer=http:/www.ask.com/web?q=puppies)saved 15992 bytes 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5
     info: [script] securesignupsite.com/ui/js/jquery-126.js
     info: [script] securesignupsite.com/ui/js/signup.js
     info: [script] securesignupsite.com/ui/js/util.js
     info: [script] securesignupsite.com/ui/js/navaway.php?s=236
     info: [img] securesignupsite.com/signupforms/236_0/logo.png
     info: [img] securesignupsite.com/signupforms/236_0/r1.jpg
     info: [img] securesignupsite.com/signupforms/236_0/r2.jpg
     info: [input] securesignupsite.com/signupforms/236_0/21.png
     info: [img] securesignupsite.com/signupforms/236_0/r3.jpg
     info: [img] securesignupsite.com/signupforms/236_0/r4.jpg
     info: [img] securesignupsite.com/signupforms/236_0/03.png
     info: [img] securesignupsite.com/signupforms/236_0/05.png
     info: [img] securesignupsite.com/signupforms/236_0/07.png
     info: [img] securesignupsite.com/signupforms/236_0/09.png
     info: [img] securesignupsite.com/signupforms/236_0/11.png
     info: [img] securesignupsite.com/signupforms/236_0/13.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3.org/TR/html4/loose.dtd">
          error: line:3: ...............^
     file: 4fdf301a6ae6aa02a4c82a1df425b9565c13bbf5: 15992 bytes

Decoded Files
4fdf/301a6ae6aa02a4c82a1df425b9565c13bbf5 from securesignupsite.com/signup/236/00/signup.php (15992 bytes, 553 hidden) download


securesignupsite.com/ui/js/navaway.php?s=236 benign
[nothing detected] (script) securesignupsite.com/ui/js/navaway.php?s=236
     status: (referer=securesignupsite.com/signup/236/00/signup.php)saved 4429 bytes 332d9de96648e652646d66d4a934dae462ef837f
     info: [img] securesignupsite.com/ui/images/close.gif
     info: [img] securesignupsite.com/ui/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:12: TypeError: Image is not a constructor
     info: [var imageurl] URL=sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/2376.jpg
     info: [var siteurl] URL=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4
     info: [var newurl] URL=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4
     info: [decodingLevel=1] found JavaScript
     file: 332d9de96648e652646d66d4a934dae462ef837f: 4429 bytes
     file: 635d04c6dcd2ec4991d34d663b1d9b1fe06cf12f: 294 bytes

Decoded Files
332d/9de96648e652646d66d4a934dae462ef837f from securesignupsite.com/ui/js/navaway.php?s=236 (4429 bytes, 144 hidden) download

635d/04c6dcd2ec4991d34d663b1d9b1fe06cf12f from securesignupsite.com/ui/js/navaway.php?s=236 (294 bytes) download


www.freeteenpassport.com/ui/js/navaway.php?s=98 benign
[nothing detected] (script) www.freeteenpassport.com/ui/js/navaway.php?s=98
     status: (referer=www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4)saved 4424 bytes 9500c320f107306438a97ed61398fa6d1d06a956
     info: [img] www.freeteenpassport.com/ui/images/close.gif
     info: [img] www.freeteenpassport.com/ui/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:12: TypeError: Image is not a constructor
     info: [var imageurl] URL=sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/3922.jpg
     info: [var siteurl] URL=www.freelifetimepassport.com/?t=15673,5,136,1&x=ncself
     info: [var newurl] URL=www.freelifetimepassport.com/?t=15673,5,136,1&x=ncself
     info: [decodingLevel=1] found JavaScript
     file: 9500c320f107306438a97ed61398fa6d1d06a956: 4424 bytes
     file: ecacb1db11298f41be7d29d913b72b7787ae7717: 288 bytes

Decoded Files
9500/c320f107306438a97ed61398fa6d1d06a956 from www.freeteenpassport.com/ui/js/navaway.php?s=98 (4424 bytes, 144 hidden) download

ecac/b1db11298f41be7d29d913b72b7787ae7717 from www.freeteenpassport.com/ui/js/navaway.php?s=98 (288 bytes) download


securesignupsite.com/ui/js/jquery-126.js benign
[nothing detected] (script) securesignupsite.com/ui/js/jquery-126.js
     status: (referer=securesignupsite.com/signup/236/00/signup.php)saved 55749 bytes 81caf0769139a3f677fb982f64da433206163e10
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: invalid flag after regular expression:
          error: line:3: s,"form")?jQuery.makeArray(this.elements):this;}).filter(function(){return this.name&&!this.disabled&&(this.checked||/select|textarea/i.test(this.nodeName)||/text|hidden|password/i.test(this.type));}).map(function(i,elem){var val=jQuery(this).val();return
          error: line:3: ^
     file: 81caf0769139a3f677fb982f64da433206163e10: 55749 bytes

Decoded Files
81ca/f0769139a3f677fb982f64da433206163e10 from securesignupsite.com/ui/js/jquery-126.js (55749 bytes) download


www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4 benign
[nothing detected] (var newurl) www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4
     status: (referer=securesignupsite.com/ui/js/navaway.php?s=236)saved 12450 bytes adbc8632a256cc59a8260aee71471aae4a74bd22
     info: [script] www.freeteenpassport.com/ui/js/jquery-126.js
     info: [embed] www.freeteenpassport.com/signupforms/player.swf
     info: [script] www.freeteenpassport.com/ui/js/signup.js
     info: [script] www.freeteenpassport.com/ui/js/util.js
     info: [script] www.freeteenpassport.com/ui/js/navaway.php?s=98
     info: [img] www.freeteenpassport.com/signupforms/98_3/43.png
     info: [img] www.freeteenpassport.com/signupforms/98_3/05.png
     info: [img] www.freeteenpassport.com/signupforms/98_3/06.png
     info: [img] www.freeteenpassport.com/signupforms/98_3/10a.png
     info: [input] www.freeteenpassport.com/signupforms/98_3/btn.gif
     info: [img] www.freeteenpassport.com/signupforms/98_3/46.png
     info: [img] www.freeteenpassport.com/signupforms/98_3/38.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/07.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/08.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/14.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/16.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/18.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/23.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/24.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/25.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/29.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/30.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/31.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/35.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/36.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/37.jpg
     info: [img] www.freeteenpassport.com/signupforms/98_3/09.png
     info: [decodingLevel=0] found JavaScript
     error: line:9: SyntaxError: missing } in XML expression:
          error: line:9:      margin:0px;
          error: line:9: ..............^
     file: adbc8632a256cc59a8260aee71471aae4a74bd22: 12450 bytes

Decoded Files
adbc/8632a256cc59a8260aee71471aae4a74bd22 from www.freeteenpassport.com/?t=15673,1,98,3&d=signup&x=dset4 (12450 bytes, 2253 hidden) download


sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/2376.jpg benign
[nothing detected] (var imageurl) sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/2376.jpg
     status: (referer=securesignupsite.com/ui/js/navaway.php?s=236)saved 95061 bytes 83748196ab88b400c8a82aaa2e5358f4e9cc942c
     info: [0] no JavaScript
     file: 83748196ab88b400c8a82aaa2e5358f4e9cc942c: 95061 bytes

Decoded Files
8374/8196ab88b400c8a82aaa2e5358f4e9cc942c from sextronix.nyk-b7.c.pnj1.cdnaccess.com/images/set17/2376.jpg (95061 bytes, 56376 hidden) download


securesignupsite.com/ui/js/signup.js benign
[nothing detected] (script) securesignupsite.com/ui/js/signup.js
     status: (referer=securesignupsite.com/signup/236/00/signup.php)saved 7293 bytes 695663e98ea5debcde0e1758b3ee98c9ee067287
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     file: 695663e98ea5debcde0e1758b3ee98c9ee067287: 7293 bytes

Decoded Files
6956/63e98ea5debcde0e1758b3ee98c9ee067287 from securesignupsite.com/ui/js/signup.js (7293 bytes, 514 hidden) download


securesignupsite.com/ui/js/util.js benign
[nothing detected] (script) securesignupsite.com/ui/js/util.js
     status: (referer=securesignupsite.com/signup/236/00/signup.php)saved 12074 bytes 52c72d0bd319f7f3fb96f22ab1e15c153a1fcdef
     info: [img] securesignupsite.com/ui/js/
     info: [embed] securesignupsite.com/ui/js/images/movies/player.swf
     info: [embed] securesignupsite.com/ui/js/
     info: [decodingLevel=0] found JavaScript
     file: 52c72d0bd319f7f3fb96f22ab1e15c153a1fcdef: 12074 bytes

Decoded Files
52c7/2d0bd319f7f3fb96f22ab1e15c153a1fcdef from securesignupsite.com/ui/js/util.js (12074 bytes, 655 hidden) download