JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link d08a74b7340d56114b6f44a15657d4a66b5123d2 (Received 2012-06-14 05:03:19, http://imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html )

URLStatus
imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html saved 15477 bytes 11c94e59b9c4647602ca961153adf6f4ca05eb2d

www.imagetwist.com/full.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

feeds.videosz.com/spots/js/transitions.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

feeds.videosz.com/spots/js/easing.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

feeds.videosz.com/spots/js/cycle.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

s7.addthis.com/js/300/ status: (referer=s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44)

imagetwist.com/jquery.cycle.all.min.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

imagetwist.com/xupload.js status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)

creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white status: (referer=imagetwist.com/lj.js)

imagetwist.com/ status: (referer=imagetwist.com/ZeroClipboard.js)

hosting.lockhosts.com/f1/frame1.php?sz=728x90&ad=imagetwist status: (referer=hosting.lockhosts.com/tubes/imagetwist/728x90/index.php)

feeds.videosz.com/spots/js/jquery-1.3.2.min.js status: (referer=feeds.videosz.com/spots/index.php?sid=107)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
imagetwist.com/lj.js benign
[nothing detected] (script) imagetwist.com/lj.js
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 2158 bytes ab4896f05292608a23d9f72510237edf9281eafb
     info: [javascript variable] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [decodingLevel=0] found JavaScript
     info: [var url] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [var newurl] URL=creatives.livejasmin.com/pu/w2/index.php?psid=imgtwpu&pstool=149_14524_151&pstour=t1&psprogram=REVS&site=jsm&tid=w2_white
     info: [decodingLevel=1] found JavaScript
     file: ab4896f05292608a23d9f72510237edf9281eafb: 2158 bytes
     file: 6e9e2241e5de80e985515ffdb055a1ead982020f: 345 bytes

Decoded Files
ab48/96f05292608a23d9f72510237edf9281eafb from imagetwist.com/lj.js (2158 bytes) download

6e9e/2241e5de80e985515ffdb055a1ead982020f from imagetwist.com/lj.js (345 bytes) download


imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/ benign
[nothing detected] (script) imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 19 bytes 5dd36cccc34fd2bf61b5008e95014ec309d76bbf
     file: 5dd36cccc34fd2bf61b5008e95014ec309d76bbf: 19 bytes

Decoded Files
5dd3/6cccc34fd2bf61b5008e95014ec309d76bbf from imagetwist.com/?op=download1&id=ispwo8j1zsfc&jsec=2rumiorv&referer=http:/http:/www.twitter.com/trends/ (19 bytes) download


s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 benign
[nothing detected] (script) s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44
     status: (referer=imagetwist.com/ispwo8j1zsfc/1514582805.jpg.html)saved 4849 bytes 6e395a8c07dba840826969333c80843a42164632
     info: [iframe] s7.addthis.com/js/300/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable t
     error: undefined variable a.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var a.style = 1;
          error: line:1: ....^
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista,      99 bytes
     info: Decoding option browser=Opera and browser=Firefox,      65 bytes
     info: [1] no JavaScript
     file: 6e395a8c07dba840826969333c80843a42164632: 4849 bytes
     file: 4eb20d38149bca657b677181fda4324c3ce6e2ed: 99 bytes

Decoded Files
6e39/5a8c07dba840826969333c80843a42164632 from s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 (4849 bytes) download

4eb2/0d38149bca657b677181fda4324c3ce6e2ed from s7.addthis.com/js/300/widget.js#pubid=ra-4efa15dd02a2da44 (99 bytes) download