JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 898b0d43986c6f40b60fef666f3971a497404346 (Received 2013-01-29 07:19:38, http://pics.lockerz.com/s/255277096 )

URLStatus
pics.lockerz.com/s/255277096 saved 58364 bytes 4187178b941ae5d51b559597e1c7367d6c963763

www.tumblr.com/share/photo?source= status: (referer=d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0)

www.googletagservices.com/tag/js/gpt.js status: (referer=pics.lockerz.com/s/255277096)

d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/ status: (referer=d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0)

pinterest.com/pin/create/button/?url= status: (referer=d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0)

Warning: reading file /storagefiles/86cc//0255755894aa6a9c4bfc74be70d349e68023 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
html5shim.googlecode.com/svn/trunk/html5.js benign
[nothing detected] (script) html5shim.googlecode.com/svn/trunk/html5.js
     status: (referer=pics.lockerz.com/s/255277096)saved 2394 bytes c9d8ca77abcd9789b91b4c3263f257e1fc1ee103
     file: c9d8ca77abcd9789b91b4c3263f257e1fc1ee103: 2394 bytes

Decoded Files
c9d8/ca77abcd9789b91b4c3263f257e1fc1ee103 from html5shim.googlecode.com/svn/trunk/html5.js (2394 bytes) download


pics.lockerz.com/s/255277096 benign
[nothing detected] pics.lockerz.com/s/255277096
     status: (referer=http:/www.ask.com/web?q=puppies)saved 58364 bytes 4187178b941ae5d51b559597e1c7367d6c963763
     info: [script] html5shim.googlecode.com/svn/trunk/html5.js
     info: [img] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/images/loadinglogoDark.gif?1.0.0
     info: [img] c0014539.r32.cf1.rackcdn.com/x2_f373828
     info: [img] assets.pinterest.com/images/PinExt.png
     info: [img] a0.twimg.com/images/3063890351/2ca796aa68ca05b2e23fa7d70c3f3057_normal.jpeg
     info: [img] c0014636.r32.cf1.rackcdn.com/x2_1062fdd4
     info: [img] c0014621.r32.cf1.rackcdn.com/x2_10325eff
     info: [img] c0014621.r32.cf1.rackcdn.com/x2_10323a76
     info: [img] c0014621.r32.cf1.rackcdn.com/x2_103229b7
     info: [img] c0014622.r32.cf1.rackcdn.com/x2_1032051e
     info: [img] c0014622.r32.cf1.rackcdn.com/x2_102d24cc
     info: [img] c0014621.r32.cf1.rackcdn.com/x2_102d1500
     info: [img] c0014661.r32.cf1.rackcdn.com/x2_10a2fcf6
     info: [img] c0014661.r32.cf1.rackcdn.com/x2_10a623a3
     info: [img] c0014661.r32.cf1.rackcdn.com/x2_10a3847d
     info: [img] c0014661.r32.cf1.rackcdn.com/x2_10a6c6cb
     info: [img] c0014662.r32.cf1.rackcdn.com/x2_10a380f6
     info: [img] c0014662.r32.cf1.rackcdn.com/x2_10a73654
     info: [img] c0014656.r32.cf1.rackcdn.com/x2_10a09d14
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.7.0/jquery.min.js
     info: [script] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0
     info: [script] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzuser/js/e09b7c6.js?1.0.0
     info: [script] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzsocial/js/629c774.js?1.0.0
     info: [script] platform.tumblr.com/v1/share.js
     info: [script] platform.twitter.com/anywhere.js?id=j1jaNcIM9Z3oRZhHtsA&v=1
     info: [img] hummingbird.lockerz.com:8000/1.gif?
     info: [script] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/ca17bcc.js?1.0.0
     info: [script] tags.crwdcntrl.net/c/1800/cc.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable node
     info: [element] URL=www.googletagservices.com/tag/js/gpt.js
     info: [1] no JavaScript
     file: 4187178b941ae5d51b559597e1c7367d6c963763: 58364 bytes
     file: 8dc44cfcfd5c417ac7d6299f38c84ccc02a30c0a: 112 bytes

Decoded Files
4187/178b941ae5d51b559597e1c7367d6c963763 from pics.lockerz.com/s/255277096 (58364 bytes, 30319 hidden) download

8dc4/4cfcfd5c417ac7d6299f38c84ccc02a30c0a from pics.lockerz.com/s/255277096 (112 bytes) download


platform.twitter.com/anywhere.js?id=j1jaNcIM9Z3oRZhHtsA&v=1 benign
[nothing detected] (script) platform.twitter.com/anywhere.js?id=j1jaNcIM9Z3oRZhHtsA&v=1
     status: (referer=pics.lockerz.com/s/255277096)saved 7968 bytes 9f7834c835992c7feb7375b1deca8d9a873cea5c
     file: 9f7834c835992c7feb7375b1deca8d9a873cea5c: 7968 bytes

Decoded Files
9f78/34c835992c7feb7375b1deca8d9a873cea5c from platform.twitter.com/anywhere.js?id=j1jaNcIM9Z3oRZhHtsA&v=1 (7968 bytes) download


tags.crwdcntrl.net/c/1800/cc.js benign
[nothing detected] (script) tags.crwdcntrl.net/c/1800/cc.js
     status: (referer=pics.lockerz.com/s/255277096)saved 44070 bytes 1020277f5aafd2f46e59247e864d59c58c9694d5
     file: 1020277f5aafd2f46e59247e864d59c58c9694d5: 44070 bytes

Decoded Files
1020/277f5aafd2f46e59247e864d59c58c9694d5 from tags.crwdcntrl.net/c/1800/cc.js (44070 bytes) download


ajax.googleapis.com/ajax/libs/jquery/1.7.0/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.7.0/jquery.min.js
     status: (referer=pics.lockerz.com/s/255277096)saved 94020 bytes 3f1b0e9e54af1af2db2c8a639530448723462151
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 3f1b0e9e54af1af2db2c8a639530448723462151: 94020 bytes

Decoded Files
3f1b/0e9e54af1af2db2c8a639530448723462151 from ajax.googleapis.com/ajax/libs/jquery/1.7.0/jquery.min.js (94020 bytes, 2 hidden) download


platform.tumblr.com/v1/share.js benign
[nothing detected] (script) platform.tumblr.com/v1/share.js
     status: (referer=pics.lockerz.com/s/255277096)saved 1814 bytes 61b4868c16058ca67106c99a08c128cc811c2a6c
     info: [decodingLevel=0] found JavaScript
     error: undefined function document.addEventListener
     info: [decodingLevel=1] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 61b4868c16058ca67106c99a08c128cc811c2a6c: 1814 bytes
     file: 0fd74fd4acd6c211eeb00d8449d7ae89d3c89363: 1702 bytes
     file: 86cc0255755894aa6a9c4bfc74be70d349e68023: 2163 bytes

Decoded Files
61b4/868c16058ca67106c99a08c128cc811c2a6c from platform.tumblr.com/v1/share.js (1814 bytes) download

0fd7/4fd4acd6c211eeb00d8449d7ae89d3c89363 from platform.tumblr.com/v1/share.js (1702 bytes) download

86cc/0255755894aa6a9c4bfc74be70d349e68023 from platform.tumblr.com/v1/share.js

d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzsocial/js/629c774.js?1.0.0 benign
[nothing detected] (script) d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzsocial/js/629c774.js?1.0.0
     status: (referer=pics.lockerz.com/s/255277096)saved 10117 bytes ffda9bc962f21cf8b37f9780960467b6890e202b
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     file: ffda9bc962f21cf8b37f9780960467b6890e202b: 10117 bytes

Decoded Files
ffda/9bc962f21cf8b37f9780960467b6890e202b from d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzsocial/js/629c774.js?1.0.0 (10117 bytes) download


d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzuser/js/e09b7c6.js?1.0.0 benign
[nothing detected] (script) d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzuser/js/e09b7c6.js?1.0.0
     status: (referer=pics.lockerz.com/s/255277096)saved 3970 bytes 942f74d325cb682608c26ad8bfe74455c7e52b89
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     file: 942f74d325cb682608c26ad8bfe74455c7e52b89: 3970 bytes

Decoded Files
942f/74d325cb682608c26ad8bfe74455c7e52b89 from d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzuser/js/e09b7c6.js?1.0.0 (3970 bytes) download


d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0 benign
[nothing detected] (script) d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0
     status: (referer=pics.lockerz.com/s/255277096)saved 74714 bytes b57114cb25c45dc093066af4a47fb9aaa5eded39
     info: [javascript variable] URL=www.tumblr.com/share/photo?source=
     info: [javascript variable] URL=pinterest.com/pin/create/button/?url=
     info: [img] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/
     info: [iframe] d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable c.fn
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var c.fn = 1;
          error: line:1: ....^
     file: b57114cb25c45dc093066af4a47fb9aaa5eded39: 74714 bytes

Decoded Files
b571/14cb25c45dc093066af4a47fb9aaa5eded39 from d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/4ea2eee.js?1.0.0 (74714 bytes) download


d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/ca17bcc.js?1.0.0 benign
[nothing detected] (script) d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/ca17bcc.js?1.0.0
     status: (referer=pics.lockerz.com/s/255277096)saved 4119 bytes e333b5f92b4d5575337fbd4548ef577f28c7cf96
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     file: e333b5f92b4d5575337fbd4548ef577f28c7cf96: 4119 bytes

Decoded Files
e333/b5f92b4d5575337fbd4548ef577f28c7cf96 from d8o6wu1tc2zf3.cloudfront.net/pegasus/4.5.71/bundles/lockerzglobal/js/ca17bcc.js?1.0.0 (4119 bytes) download