JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security
researchers and computer professionals
Submission permanent link 1de871607b02b85939e5e78c1947c6594d34a6ba (Received 2012-04-04 17:25:47, http://whatismyipaddress.com/ip/21.157.164.102 )
| URL | Status |
| whatismyipaddress.com/ip/21.157.164.102 | saved 10729 bytes 19ca083de5f2ce2f9196a7e0fff2fdb73803efad |
|
| www.googleadservices.com/pagead/ | status: (referer=www.googleadservices.com/pagead/conversion.js) |
|
All Malicious or Suspicious Elements of Submission
None
cdn.whatismyipaddress.com/images/sq.png benign[nothing detected] (jsvar) cdn.whatismyipaddress.com/images/sq.png
status: (referer=whatismyipaddress.com/ip/21.157.164.102)saved 535 bytes f776817115ece28f9146d2059217eea0bda3a282
info: [0] no JavaScript
file: f776817115ece28f9146d2059217eea0bda3a282: 535 bytes
Decoded Filesf776/817115ece28f9146d2059217eea0bda3a282 from cdn.whatismyipaddress.com/images/sq.png (535 bytes, 315 hidden)
download
maps.google.com/maps/api/js?sensor=false benign[nothing detected] (script) maps.google.com/maps/api/js?sensor=false
status: (referer=whatismyipaddress.com/ip/21.157.164.102)saved 4688 bytes ebad363fd3a42a381396c357e8d68c7f55fb4a27
info: [decodingLevel=0] found JavaScript
info: [script] maps.gstatic.com/intl/us/mapfiles/api-3/8/6/main.js
info: [decodingLevel=1] found JavaScript
file: ebad363fd3a42a381396c357e8d68c7f55fb4a27: 4688 bytes
file: d816a33cee976889a5ae875763886e239fb797d5: 132 bytes
Decoded Filesebad/363fd3a42a381396c357e8d68c7f55fb4a27 from maps.google.com/maps/api/js?sensor=false (4688 bytes, 58 hidden)
downloadd816/a33cee976889a5ae875763886e239fb797d5 from maps.google.com/maps/api/js?sensor=false (132 bytes)
download
whatismyipaddress.com/ip/21.157.164.102 benign[nothing detected] whatismyipaddress.com/ip/21.157.164.102
status: (referer=http:/twitter.com/trends/)saved 10729 bytes 19ca083de5f2ce2f9196a7e0fff2fdb73803efad
info: [javascript variable] URL=cdn.whatismyipaddress.com/images/sq.png
info: [img] cdn.whatismyipaddress.com/images/flags/us.png
info: [script] www.googleadservices.com/pagead/conversion.js
info: [img] www.googleadservices.com/pagead/conversion/1072692559/?label=l1zuCOHOugEQ_wM&guid=ON&script=0
info: [img] cdn.whatismyipaddress.com/images/gplus.gif
info: [img] cdn.whatismyipaddress.com/images/twitter.gif
info: [img] cdn.whatismyipaddress.com/images/facebook.png
info: [img] cdn.whatismyipaddress.com/images/myip-logo-wide.png
info: [script] maps.google.com/maps/api/js?sensor=false
info: [decodingLevel=0] found JavaScript
error: undefined variable node
info: [1] no JavaScript
file: 19ca083de5f2ce2f9196a7e0fff2fdb73803efad: 10729 bytes
file: 03b65c21c8284ec497aad53cb43c218590549f5a: 102 bytes
Decoded Files19ca/083de5f2ce2f9196a7e0fff2fdb73803efad from whatismyipaddress.com/ip/21.157.164.102 (10729 bytes, 352 hidden)
download03b6/5c21c8284ec497aad53cb43c218590549f5a from whatismyipaddress.com/ip/21.157.164.102 (102 bytes)
download
maps.gstatic.com/intl/us/mapfiles/api-3/8/6/main.js benign[nothing detected] (script) maps.gstatic.com/intl/us/mapfiles/api-3/8/6/main.js
status: (referer=maps.google.com/maps/api/js?sensor=false)saved 35276 bytes fdb6e54415a0b48d7b4c8f381e959e42089dce17
info: [decodingLevel=0] found JavaScript
error: undefined variable Wc.google
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var Wc.google = 1;
error: line:1: ....^
file: fdb6e54415a0b48d7b4c8f381e959e42089dce17: 35276 bytes
Decoded Filesfdb6/e54415a0b48d7b4c8f381e959e42089dce17 from maps.gstatic.com/intl/us/mapfiles/api-3/8/6/main.js (35276 bytes)
download
www.googleadservices.com/pagead/conversion.js benign[nothing detected] (script) www.googleadservices.com/pagead/conversion.js
status: (referer=whatismyipaddress.com/ip/21.157.164.102)saved 6369 bytes 9bbb941f3dac751131ed2cd550e374a589144754
info: [img] www.googleadservices.com/pagead/
info: [iframe] www.googleadservices.com/pagead/
info: [decodingLevel=0] found JavaScript
file: 9bbb941f3dac751131ed2cd550e374a589144754: 6369 bytes
Decoded Files9bbb/941f3dac751131ed2cd550e374a589144754 from www.googleadservices.com/pagead/conversion.js (6369 bytes)
download