JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link c2648ab53b5698ead3c559523b6a1deb06e4fd29 (Received 2013-08-21 21:02:10, https://secure.fling.com/main.php?a=billing.join )

URLStatus
secure.fling.com/main.php?a=billing.join saved 12631 bytes f5d38c7bc2b287984eaf49a9a1dde46d38e55312

All Malicious or Suspicious Elements of Submission

suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Binary Threshold
mpsnare.iesnare.com/snare.js suspicious
[suspicious:5] (ipaddr:66.151.32.39) (script) mpsnare.iesnare.com/snare.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 35408 bytes 408a8cd840efe9c0ad300e27ac9f1206da2e2726
     info: [embed] mpsnare.iesnare.com/
     info: [decodingLevel=0] found JavaScript
     suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Binary Threshold
     info: [setAttribute src] URL=mpsnare.iesnare.com/script/logo.js
     info: [element] URL=mpsnare.iesnare.com/undefined
     info: [decodingLevel=1] found JavaScript
     info: file: saved mpsnare.iesnare.com/snare.js to (408a8cd840efe9c0ad300e27ac9f1206da2e2726)
     file: 408a8cd840efe9c0ad300e27ac9f1206da2e2726: 35408 bytes
     file: 480dc98fe7651560077e897997efcfb4d381d702: 637 bytes

Decoded Files
408a/8cd840efe9c0ad300e27ac9f1206da2e2726 from mpsnare.iesnare.com/snare.js (35408 bytes) download

480d/c98fe7651560077e897997efcfb4d381d702 from mpsnare.iesnare.com/snare.js (637 bytes, 125 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (element) www.google-analytics.com/ga.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 39867 bytes e8907e8adf53abead5c4398b03498acb35bd9bf2
     info: [decodingLevel=0] found JavaScript
     file: e8907e8adf53abead5c4398b03498acb35bd9bf2: 39867 bytes

Decoded Files
e890/7e8adf53abead5c4398b03498acb35bd9bf2 from www.google-analytics.com/ga.js (39867 bytes) download


cachewp.fling.com/js/1377028874/public.js benign
[nothing detected] (script) cachewp.fling.com/js/1377028874/public.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 97234 bytes 71c90913be2fe2ce5b7be682fda9065a44808378
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=cachewp.fling.com/js/1377028874/undefined
     info: [1] no JavaScript
     file: 71c90913be2fe2ce5b7be682fda9065a44808378: 97234 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
71c9/0913be2fe2ce5b7be682fda9065a44808378 from cachewp.fling.com/js/1377028874/public.js (97234 bytes, 2 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from cachewp.fling.com/js/1377028874/public.js (72 bytes) download


secure.fling.com/main.php?a=billing.join benign
[nothing detected] secure.fling.com/main.php?a=billing.join
     status: (referer=http:/www.ask.com/web?q=puppies)saved 12631 bytes f5d38c7bc2b287984eaf49a9a1dde46d38e55312
     info: [img] media.fling.com/images/sm.png
     info: [img] media.fling.com/images/white.png
     info: [script] cachewp.fling.com/js/1377028874/public.js
     info: [img] media.fling.com/images/logo.png
     info: [img] media.fling.com/images/arrows.gif
     info: [img] ssl.gstatic.com/images/icons/gplus-32.png
     info: [img] media.fling.com/images/youtube.png
     info: [img] media.fling.com/images/seal.png
     info: [script] mpsnare.iesnare.com/snare.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable s
     info: [element] URL=www.google-analytics.com/ga.js
     info: [1] no JavaScript
     file: f5d38c7bc2b287984eaf49a9a1dde46d38e55312: 12631 bytes
     file: 5809d3145354164e801df9c79cfd04f441bb2a83: 103 bytes

Decoded Files
f5d3/8c7bc2b287984eaf49a9a1dde46d38e55312 from secure.fling.com/main.php?a=billing.join (12631 bytes, 2935 hidden) download

5809/d3145354164e801df9c79cfd04f441bb2a83 from secure.fling.com/main.php?a=billing.join (103 bytes) download


mpsnare.iesnare.com/script/logo.js benign
[nothing detected] (setAttribute src) mpsnare.iesnare.com/script/logo.js
     status: (referer=mpsnare.iesnare.com/snare.js)saved 96 bytes 81dead13b6023c791276a38f04f4f848d00aed89
     info: [decodingLevel=0] found JavaScript
     error: undefined variable dp
     error: undefined function dp.updateBlackboxes
     file: 81dead13b6023c791276a38f04f4f848d00aed89: 96 bytes

Decoded Files
81de/ad13b6023c791276a38f04f4f848d00aed89 from mpsnare.iesnare.com/script/logo.js (96 bytes) download


mpsnare.iesnare.com/ benign
[nothing detected] (embed) mpsnare.iesnare.com/
     status: (referer=mpsnare.iesnare.com/snare.js)saved 198 bytes cb2978c12e0f5493aefa3b8d2a8ab7d2a96bfafe
     info: [0] no JavaScript
     file: cb2978c12e0f5493aefa3b8d2a8ab7d2a96bfafe: 198 bytes

Decoded Files
cb29/78c12e0f5493aefa3b8d2a8ab7d2a96bfafe from mpsnare.iesnare.com/ (198 bytes) download


cachewp.fling.com/js/1377028874/undefined benign
[nothing detected] (element) cachewp.fling.com/js/1377028874/undefined
     status: (referer=cachewp.fling.com/js/1377028874/public.js)saved 564 bytes 1b3291d4eea179c84145b2814cb53e6a506ec201
     info: [0] no JavaScript
     file: 1b3291d4eea179c84145b2814cb53e6a506ec201: 564 bytes

Decoded Files
1b32/91d4eea179c84145b2814cb53e6a506ec201 from cachewp.fling.com/js/1377028874/undefined (564 bytes, 13 hidden) download


mpsnare.iesnare.com/undefined benign
[nothing detected] (element) mpsnare.iesnare.com/undefined
     status: (referer=mpsnare.iesnare.com/snare.js)saved 207 bytes 0e2ef9df2647a29a662726a4d4c68565861a01fe
     info: [0] no JavaScript
     file: 0e2ef9df2647a29a662726a4d4c68565861a01fe: 207 bytes

Decoded Files
0e2e/f9df2647a29a662726a4d4c68565861a01fe from mpsnare.iesnare.com/undefined (207 bytes) download