JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link e06fa56a27c5bdcf841113a0a7855e3b41ac24de (Received 2017-05-19 08:16:17, ORDER-LCQXJU-656-669633.js )

URLStatus
127.0.0.1/function

lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/box.htm status: (referer=lapetitenina.com/eyym/Sfichiers/Sfichiers/box.htm)

mkonto.co.za/img/zxmcajimn/ status: (referer=http:/www.ask.com/web?q=puppies)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
imnet.ro/gcxbh/ benign
[nothing detected] (open) imnet.ro/gcxbh/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 624 bytes 3272fc2c46427f3dd6c4aff74bafb7bd02b7c5c5
     info: [script] imnet.ro/errors/inc/errordocs.js
     info: [decodingLevel=0] found JavaScript
     error: undefined variable path
     error: undefined function path
     file: 3272fc2c46427f3dd6c4aff74bafb7bd02b7c5c5: 624 bytes

Decoded Files
3272/fc2c46427f3dd6c4aff74bafb7bd02b7c5c5 from imnet.ro/gcxbh/ (624 bytes, 44 hidden) download


imnet.ro/errors/inc/errordocs.js benign
[nothing detected] (script) imnet.ro/errors/inc/errordocs.js
     status: (referer=imnet.ro/gcxbh/)saved 1184 bytes 1d8c40612553aac62b727bf2cd6b22e7c1c61cd6
     file: 1d8c40612553aac62b727bf2cd6b22e7c1c61cd6: 1184 bytes

Decoded Files
1d8c/40612553aac62b727bf2cd6b22e7c1c61cd6 from imnet.ro/errors/inc/errordocs.js (1184 bytes, 15 hidden) download


bunngalow.com/img-sys/js/respond.min.js benign
[nothing detected] (script) bunngalow.com/img-sys/js/respond.min.js
     status: (referer=bunngalow.com/injeutznnb/)saved 4591 bytes 8e786bcf921518f0c8c46d14a51235af2fb99926
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     file: 8e786bcf921518f0c8c46d14a51235af2fb99926: 4591 bytes

Decoded Files
8e78/6bcf921518f0c8c46d14a51235af2fb99926 from bunngalow.com/img-sys/js/respond.min.js (4591 bytes) download


bunngalow.com/injeutznnb/ benign
[nothing detected] (open) bunngalow.com/injeutznnb/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 4347 bytes 9c8039ff129c00bb80983efcafe5c63447758ad4
     info: [script] bunngalow.com/img-sys/js/respond.min.js
     info: [script] bunngalow.com/img-sys/js/modernizr-2.6.2.min.js
     info: [img] bunngalow.com/img-sys/img/snappy.png
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!doctype html>
          error: line:3: ..............^
     file: 9c8039ff129c00bb80983efcafe5c63447758ad4: 4347 bytes

Decoded Files
9c80/39ff129c00bb80983efcafe5c63447758ad4 from bunngalow.com/injeutznnb/ (4347 bytes, 1234 hidden) download


upload benign
[nothing detected] upload
     info: [decodingLevel=0] found JavaScript
     error: undefined variable WScript
     error: undefined function WScript.CreateObject
     info: DecodedMsg detected /info.ActiveXObject MSXML2.XMLHTTP
     info: [open] URL=imnet.ro/gcxbh/
     info: [open] URL=lapetitenina.com/eyym/
     info: [open] URL=johncarta.com/jexaag/
     info: [open] URL=mkonto.co.za/img/zxmcajimn/
     info: [open] URL=bunngalow.com/injeutznnb/
     info: [var VkGo] URL=127.0.0.1/function
     info: [decodingLevel=1] found JavaScript
     file: 40048e016abc06ed5669d98a1d8e2dc5b864de74: 245876 bytes
     file: 2e924303f5eab52c71e4249b55c16faca5806731: 2010 bytes

Decoded Files
4004/8e016abc06ed5669d98a1d8e2dc5b864de74 from upload (245876 bytes) download

2e92/4303f5eab52c71e4249b55c16faca5806731 from upload (2010 bytes) download


lapetitenina.com/eyym/Sfichiers/box.htm benign
[nothing detected] (iframe) lapetitenina.com/eyym/Sfichiers/box.htm
     status: (referer=lapetitenina.com/eyym/)saved 20412 bytes 71c63f4cbb953c4c54489f578341febcc85f58a1
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/5e196cc753842e9e15588639070e51b3237ab515.jpg
     info: [iframe] lapetitenina.com/eyym/Sfichiers/Sfichiers/box.htm
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/facebook.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/twitter.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/6FA7A984F5F0EC3-8.gif
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/a39177e9fd374d72425f7c75541afa5f5d5dbcb6.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/65543d81dba8dc05ec3587f8218d2dc5777dac0b.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/89f15b1a8a2869306c4a530ec66d4bf8097a8b3a.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/72b07cbfa3892ef0fe91415de03f7dd3f62c9ae5.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/11bbafdabc14ae825f28d6b3562716efd51b8c38.png
     file: 71c63f4cbb953c4c54489f578341febcc85f58a1: 20412 bytes

Decoded Files
71c6/3f4cbb953c4c54489f578341febcc85f58a1 from lapetitenina.com/eyym/Sfichiers/box.htm (20412 bytes, 5958 hidden) download


lapetitenina.com/eyym/ benign
[nothing detected] (open) lapetitenina.com/eyym/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 20412 bytes 71c63f4cbb953c4c54489f578341febcc85f58a1
     info: [img] lapetitenina.com/eyym/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/5e196cc753842e9e15588639070e51b3237ab515.jpg
     info: [iframe] lapetitenina.com/eyym/Sfichiers/box.htm
     info: [img] lapetitenina.com/eyym/Sfichiers/facebook.png
     info: [img] lapetitenina.com/eyym/Sfichiers/twitter.png
     info: [img] lapetitenina.com/eyym/Sfichiers/6FA7A984F5F0EC3-8.gif
     info: [img] lapetitenina.com/eyym/Sfichiers/a39177e9fd374d72425f7c75541afa5f5d5dbcb6.png
     info: [img] lapetitenina.com/eyym/Sfichiers/65543d81dba8dc05ec3587f8218d2dc5777dac0b.png
     info: [img] lapetitenina.com/eyym/Sfichiers/89f15b1a8a2869306c4a530ec66d4bf8097a8b3a.png
     info: [img] lapetitenina.com/eyym/Sfichiers/72b07cbfa3892ef0fe91415de03f7dd3f62c9ae5.png
     info: [img] lapetitenina.com/eyym/Sfichiers/11bbafdabc14ae825f28d6b3562716efd51b8c38.png
     file: 71c63f4cbb953c4c54489f578341febcc85f58a1: 20412 bytes

Decoded Files
71c6/3f4cbb953c4c54489f578341febcc85f58a1 from lapetitenina.com/eyym/ (20412 bytes, 5958 hidden) download


lapetitenina.com/eyym/Sfichiers/Sfichiers/box.htm benign
[nothing detected] (iframe) lapetitenina.com/eyym/Sfichiers/Sfichiers/box.htm
     status: (referer=lapetitenina.com/eyym/Sfichiers/box.htm)saved 20412 bytes 71c63f4cbb953c4c54489f578341febcc85f58a1
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/oxito.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/5e196cc753842e9e15588639070e51b3237ab515.jpg
     info: [iframe] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/box.htm
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/facebook.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/twitter.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/6FA7A984F5F0EC3-8.gif
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/a39177e9fd374d72425f7c75541afa5f5d5dbcb6.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/65543d81dba8dc05ec3587f8218d2dc5777dac0b.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/89f15b1a8a2869306c4a530ec66d4bf8097a8b3a.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/72b07cbfa3892ef0fe91415de03f7dd3f62c9ae5.png
     info: [img] lapetitenina.com/eyym/Sfichiers/Sfichiers/Sfichiers/11bbafdabc14ae825f28d6b3562716efd51b8c38.png
     file: 71c63f4cbb953c4c54489f578341febcc85f58a1: 20412 bytes

Decoded Files
71c6/3f4cbb953c4c54489f578341febcc85f58a1 from lapetitenina.com/eyym/Sfichiers/Sfichiers/box.htm (20412 bytes, 5958 hidden) download


johncarta.com/jexaag/ benign
[nothing detected] [MZ] (open) johncarta.com/jexaag/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 220672 bytes 72556e28f8befc97293c7575c4df19080a817569
     info: [0] executable file
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 72556e28f8befc97293c7575c4df19080a817569: 220672 bytes
     file: 5bf084d35561cbc7a81ae40689c5362e449327eb: 205940 bytes
     file: c0638e67d291d7a4600daaccbb859be44678fd5b: 205946 bytes
     file: 861bd3f93d0ea8dc8fe72caa50c43341bf87d33c: 206155 bytes
     file: fbad34ab00c5e71f53bb2ad0ac9fe4ed613422d9: 206347 bytes
     file: d55ec709456fe475082d1979c7d0808daf1a46dd: 206061 bytes
     file: afd61f59b450c5278cad5ca39f9a3a3a7758d28e: 206185 bytes

Decoded Files
7255/6e28f8befc97293c7575c4df19080a817569 from johncarta.com/jexaag/ (220672 bytes, 141601 hidden) download

5bf0/84d35561cbc7a81ae40689c5362e449327eb from johncarta.com/jexaag/ (205940 bytes, 126761 hidden) download

c063/8e67d291d7a4600daaccbb859be44678fd5b from johncarta.com/jexaag/ (205946 bytes, 126761 hidden) download

861b/d3f93d0ea8dc8fe72caa50c43341bf87d33c from johncarta.com/jexaag/ (206155 bytes, 126761 hidden) download

fbad/34ab00c5e71f53bb2ad0ac9fe4ed613422d9 from johncarta.com/jexaag/ (206347 bytes, 126761 hidden) download

d55e/c709456fe475082d1979c7d0808daf1a46dd from johncarta.com/jexaag/ (206061 bytes, 126761 hidden) download

afd6/1f59b450c5278cad5ca39f9a3a3a7758d28e from johncarta.com/jexaag/ (206185 bytes, 126761 hidden) download


bunngalow.com/img-sys/js/modernizr-2.6.2.min.js benign
[nothing detected] (script) bunngalow.com/img-sys/js/modernizr-2.6.2.min.js
     status: (referer=bunngalow.com/injeutznnb/)saved 15153 bytes 281c5937a9c49402bff5ed2d9374578f9dd68801
     file: 281c5937a9c49402bff5ed2d9374578f9dd68801: 15153 bytes

Decoded Files
281c/5937a9c49402bff5ed2d9374578f9dd68801 from bunngalow.com/img-sys/js/modernizr-2.6.2.min.js (15153 bytes) download