JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link c2648ab53b5698ead3c559523b6a1deb06e4fd29 (Received 2013-08-21 21:02:10, https://secure.fling.com/main.php?a=billing.join )

URLStatus
secure.fling.com/main.php?a=billing.join saved 12631 bytes f5d38c7bc2b287984eaf49a9a1dde46d38e55312

All Malicious or Suspicious Elements of Submission

suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Binary Threshold
mpsnare.iesnare.com/snare.js suspicious
[suspicious:5] (ipaddr:66.151.32.39) (script) mpsnare.iesnare.com/snare.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 35408 bytes 408a8cd840efe9c0ad300e27ac9f1206da2e2726
     info: [embed] mpsnare.iesnare.com/
     info: [decodingLevel=0] found JavaScript
     suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Binary Threshold
     info: [setAttribute src] URL=mpsnare.iesnare.com/script/logo.js
     info: [element] URL=mpsnare.iesnare.com/undefined
     info: [decodingLevel=1] found JavaScript
     info: file: saved mpsnare.iesnare.com/snare.js to (408a8cd840efe9c0ad300e27ac9f1206da2e2726)
     file: 408a8cd840efe9c0ad300e27ac9f1206da2e2726: 35408 bytes
     file: 480dc98fe7651560077e897997efcfb4d381d702: 637 bytes

Decoded Files
408a/8cd840efe9c0ad300e27ac9f1206da2e2726 from mpsnare.iesnare.com/snare.js (35408 bytes) download

480d/c98fe7651560077e897997efcfb4d381d702 from mpsnare.iesnare.com/snare.js (637 bytes, 125 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (element) www.google-analytics.com/ga.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 39867 bytes e8907e8adf53abead5c4398b03498acb35bd9bf2
     info: [decodingLevel=0] found JavaScript
     file: e8907e8adf53abead5c4398b03498acb35bd9bf2: 39867 bytes

Decoded Files
e890/7e8adf53abead5c4398b03498acb35bd9bf2 from www.google-analytics.com/ga.js (39867 bytes) download


cachewp.fling.com/js/1377028874/public.js benign
[nothing detected] (script) cachewp.fling.com/js/1377028874/public.js
     status: (referer=secure.fling.com/main.php?a=billing.join)saved 97234 bytes 71c90913be2fe2ce5b7be682fda9065a44808378
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=cachewp.fling.com/js/1377028874/undefined
     info: [1] no JavaScript
     file: 71c90913be2fe2ce5b7be682fda9065a44808378: 97234 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
71c9/0913be2fe2ce5b7be682fda9065a44808378 from cachewp.fling.com/js/1377028874/public.js (97234 bytes, 2 hidden)