JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link d08a74b7340d56114b6f44a15657d4a66b5123d2 (Received 2012-06-14 05:03:19, http://imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html )

URLStatus
imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html saved 15477 bytes 11c94e59b9c4647602ca961153adf6f4ca05eb2d

www.imagetwist.com/full.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

feeds.videosz.com/spots/js/transitions.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

feeds.videosz.com/spots/js/easing.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

feeds.videosz.com/spots/js/cycle.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

s7.addthis.com/js/300/ status: (referer=s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44)

imagetwist.com/jquery.cycle.all.min.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

imagetwist.com/xupload.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white status: (referer=imagetwist.com/lj.js)

imagetwist.com/ status: (referer=imagetwist.com/ZeroClipboard.js)

hosting.lockhosts.com/f1/frame1.php?sz=728x90&ad=imagetwist status: (referer=hosting.lockhosts.com/tubes/imagetwist/728x90/index.php)

feeds.videosz.com/spots/js/jquery-1.3.2.min.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
imagetwist.com/lj.js benign
[nothing detected] (script) imagetwist.com/lj.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 2158 bytes ab4896f05292608a23d9f72510237edf9281eafb
     info: [javascript variable] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [decodingLevel=0] found JavaScript
     info: [var url] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [var newurl] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [decodingLevel=1] found JavaScript
     file: ab4896f05292608a23d9f72510237edf9281eafb: 2158 bytes
     file: 6e9e2241e5de80e985515ffdb055a1ead982020f: 345 bytes

Decoded Files
ab48/96f05292608a23d9f72510237edf9281eafb from imagetwist.com/lj.js (2158 bytes) download

6e9e/2241e5de80e985515ffdb055a1ead982020f from imagetwist.com/lj.js (345 bytes) download


imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/ benign
[nothing detected] (script) imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 19 bytes 5dd36cccc34fd2bf61b5008e95014ec309d76bbf
     file: 5dd36cccc34fd2bf61b5008e95014ec309d76bbf: 19 bytes

Decoded Files
5dd3/6cccc34fd2bf61b5008e95014ec309d76bbf from imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/ (19 bytes) download


s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 benign
[nothing detected] (script) s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 4849 bytes 6e395a8c07dba840826969333c80843a42164632
     info: [iframe] s7.addthis.com/js/300/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable t
     error: undefined variable a.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var a.style = 1;
          error: line:1: ....^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista,      99 bytes
     info: Decoding option browser=Opera and browser=Firefox,      65 bytes
     info: [1] no JavaScript
     file: 6e395a8c07dba840826969333c80843a42164632: 4849 bytes
     file: 4eb20d38149bca657b677181fda4324c3ce6e2ed: 99 bytes

Decoded Files
6e39/5a8c07dba840826969333c80843a42164632 from s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 (4849 bytes) download

4eb2/0d38149bca657b677181fda4324c3ce6e2ed from s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 (99 bytes) download


imagetwist.com/ZeroClipboard.js benign
[nothing detected] (script) imagetwist.com/ZeroClipboard.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 9784 bytes 3d25c82ea5819ee284ec5700bfd5ba5cfa4aec12
     info: [embed] imagetwist.com/
     info: [decodingLevel=0] found JavaScript
     file: 3d25c82ea5819ee284ec5700bfd5ba5cfa4aec12: 9784 bytes

Decoded Files
3d25/c82ea5819ee284ec5700bfd5ba5cfa4aec12 from imagetwist.com/ZeroClipboard.js (9784 bytes, 886 hidden) download


imagetwist.com/jquery.easing.1.3.js benign
[nothing detected] (script) imagetwist.com/jquery.easing.1.3.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 8097 bytes 82e40d060bc269a6dde20c3990ca5a4fea6ca754
     file: 82e40d060bc269a6dde20c3990ca5a4fea6ca754: 8097 bytes

Decoded Files
82e4/0d060bc269a6dde20c3990ca5a4fea6ca754 from imagetwist.com/jquery.easing.1.3.js (8097 bytes, 203 hidden) download


hosting.lockhosts.com/tubes/imagetwist/728x90/index.php benign
[nothing detected] (iframe) hosting.lockhosts.com/tubes/imagetwist/728x90/index.php
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 178 bytes f79e04a5d66d7d8d69c71a6de6ce3750257a96a1
     info: [iframe] hosting.lockhosts.com/f1/frame1.php?sz=728x90&ad=imagetwist
     info: [0] no JavaScript
     file: f79e04a5d66d7d8d69c71a6de6ce3750257a96a1: 178 bytes

Decoded Files
f79e/04a5d66d7d8d69c71a6de6ce3750257a96a1 from hosting.lockhosts.com/tubes/imagetwist/728x90/index.php (178 bytes) download


ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js benign
[nothing detected] (script) ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 94840 bytes abcd2ba13348f178b17141b445bc99f1917d47af
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     info: Decoding option browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera,      62 bytes
     file: abcd2ba13348f178b17141b445bc99f1917d47af: 94840 bytes
     file: 3ae9ddb6e3cb6a0463d111af8248eb508b1256fe: 95318 bytes
     file: b6512eab8369b4c0b913df344e53ee3c46c0ab30: 95351 bytes
     file: c9b52e8144e7cfb4119ab6d647cd3b20ed595101: 62 bytes

Decoded Files
abcd/2ba13348f178b17141b445bc99f1917d47af from ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js (94840 bytes, 2 hidden) download

3ae9/ddb6e3cb6a0463d111af8248eb508b1256fe from ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js (95318 bytes, 2 hidden) download

b651/2eab8369b4c0b913df344e53ee3c46c0ab30 from ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js (95351 bytes, 2 hidden) download

c9b5/2e8144e7cfb4119ab6d647cd3b20ed595101 from ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js (62 bytes) download


imagetwist.com/jquery-1.3.2.min.js benign
[nothing detected] (script) imagetwist.com/jquery-1.3.2.min.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 57272 bytes fd09a826a62fc6f5809d0a67bf0f80b3b76ca894
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: invalid flag after regular expression:
          error: line:3: filter(function(){return this.name&&!this.disabled&&(this.checked||/select|textarea/i.test(this.nodeName)||/text|hidden|password|search/i.test(this.type))}).map(function(E,F){var G=o(this).val();return G==null?null:o.isArray(G)?o.map(G,function(I,H){retur
          error: line:3: ^
     error: undefined function T.insertBefore
     error: undefined variable T
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      63 bytes
     info: [1] no JavaScript
     file: fd09a826a62fc6f5809d0a67bf0f80b3b76ca894: 57272 bytes
     file: cd94dfeccbadf0ad8852122817b2c802b8472294: 63 bytes

Decoded Files
fd09/a826a62fc6f5809d0a67bf0f80b3b76ca894 from imagetwist.com/jquery-1.3.2.min.js (57272 bytes, 18 hidden) download

cd94/dfeccbadf0ad8852122817b2c802b8472294 from imagetwist.com/jquery-1.3.2.min.js (63 bytes) download


imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html benign
[nothing detected] imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html
     status: (referer=http:/www.twitter.com/trends/)saved 15477 bytes 11c94e59b9c4647602ca961153adf6f4ca05eb2d
     info: [script] imagetwist.com/xupload.js
     info: [script] imagetwist.com/jquery-1.3.2.min.js
     info: [script] imagetwist.com/jquery.easing.1.3.js
     info: [script] imagetwist.com/jquery.cycle.all.min.js
     info: [img] i.t.net.ar/images/cerrar.png
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
     info: [script] www.imagetwist.com/full.js
     info: [script] imagetwist.com/lj.js
     info: [script] s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44
     info: [iframe] hosting.lockhosts.com/tubes/imagetwist/728x90/index.php
     info: [img] img10.imagetwist.com/i/01458/ispwo8j1zsfc.jpg
     info: [iframe] feeds.videosz.com/spots/index.php?sid=107
     info: [img] img10.imagetwist.com/th/01458/ispwo8j1zsfc.jpg
     info: [script] imagetwist.com/ZeroClipboard.js
     info: [script] imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN"
          error: line:3: ...............^
     file: 11c94e59b9c4647602ca961153adf6f4ca05eb2d: 15477 bytes

Decoded Files
11c9/4e59b9c4647602ca961153adf6f4ca05eb2d from imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html (15477 bytes, 1398 hidden) download


feeds.videosz.com/spots/index.php?sid=107 benign
[nothing detected] (iframe) feeds.videosz.com/spots/index.php?sid=107
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 5049 bytes 3f6b8eff5ebfc9d22b51e84c00bc454e85e6e329
     info: [script] feeds.videosz.com/spots/js/jquery-1.3.2.min.js
     info: [script] feeds.videosz.com/spots/js/cycle.js
     info: [script] feeds.videosz.com/spots/js/transitions.js
     info: [script] feeds.videosz.com/spots/js/easing.js
     info: [img] cdn.niche.videosz.com/40/300x250-830677.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-622065.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-712494.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-766717.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-724443.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-490691.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-712645.jpg
     info: [img] cdn.niche.videosz.com/40/300x250-624847.jpg
     info: [img] cdn.feeds.videosz.com/custom/18andabused600x260/t.png
     info: [img] cdn.feeds.videosz.com/custom/18andabused600x260/b.png
     info: [img] cdn.feeds.videosz.com/custom/18andabused600x260/m.png
     info: [img] ts.videosz.com/img.php?cid=212&aid=25&srs=
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     error: line:19: SyntaxError: missing } in XML expression:
          error: line:19:      timeout:1500});
          error: line:19: ......................^
     file: 3f6b8eff5ebfc9d22b51e84c00bc454e85e6e329: 5049 bytes

Decoded Files
3f6b/8eff5ebfc9d22b51e84c00bc454e85e6e329 from feeds.videosz.com/spots/index.php?sid=107 (5049 bytes, 136 hidden) download