JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 1219ebc298d38c1349f020f265816d7c3c938184 (Received 2012-06-14 15:42:31, http://jafiles.net/1m65f2 )

URLStatus
jafiles.net/1m65f2 saved 21156 bytes 4e85be26df7bf7f12b9f151e8c6af0b9851bd1a9

www.cpalead.com/assets/js/selectivizr.js status: (referer=www.cpalead.com/)

www.cpalead.com/assets/js/jquery.scrollTo-1.3.3.js status: (referer=www.cpalead.com/)

sharecash.org/scriptaculous/src/ status: (referer=sharecash.org/scriptaculous/src/scriptaculous.js)

www.cpalead.com/assets/js/jquery.localscroll-1.2.5.js status: (referer=www.cpalead.com/)

www.cpalead.com/js/jquery/detectmobilebrowser.js status: (referer=www.cpalead.com/)

ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js status: (referer=www.cpalead.com/)

cpalead.com/exitpopup-lander-slotmachine.php?pub=9483&gateid=205188 status: (referer=www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4)

www.cpalead.com/assets/js/twitter-text-1.4.10.js status: (referer=www.cpalead.com/)

ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js status: (referer=www.cpalead.com/)

www.cpalead.com/assets/js/modernizr-1.7.min.js status: (referer=www.cpalead.com/)

use.typekit.com/dau3fap.js status: (referer=www.cpalead.com/)

www.cpalead.com/assets/js/functions.js status: (referer=www.cpalead.com/)

www.cpalead.com/assets/js/colorbox/jquery.colorbox-min.js status: (referer=www.cpalead.com/)

www.cpalead.com/assets/js/jquery.serialScroll-1.2.1.js status: (referer=www.cpalead.com/)

Warning: reading file /storagefiles/a8cd//57a09a0cfc0eb34fd138cce105f2e93f7182 failed
Warning: reading file /storagefiles/a092//61215174ecc467551fb2756c883c460e6334 failed
Warning: reading file /storagefiles/3538//e20bbcf6b16ada6535d73826906837c5fb71 failed
Warning: reading file /storagefiles/98c6//faa12873a78ad2bec639b7266e5b5d3a5b18 failed
Warning: reading file /storagefiles/e1ee//3a4deb1b4fb4742f87ef248c669ad7ad2714 failed
Warning: reading file /storagefiles/9017//e5dd6a545e77fd4d19b292c5bf70585eb084 failed
Warning: reading file /storagefiles/0222//246efa0de68daa7d7f71ac7d8c9861223ad1 failed
Warning: reading file /storagefiles/f22f//60a6d931eb15a2cec99ff8a113dd62a16657 failed
Warning: reading file /storagefiles/8cad//970258c560b43108416ca3f4e58d323c541d failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
sharecash.org/scriptaculous/lib/prototype.js benign
[nothing detected] (script) sharecash.org/scriptaculous/lib/prototype.js
     status: (referer=jafiles.net/1m65f2)saved 129738 bytes 278d68b8e9edad4895836e272fbc8f78ec4f2f3e
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [script] :
     info: [decodingLevel=0] found JavaScript
     error: undefined function document.createTextNode
     error: ./pre.js:135: TypeError: invalid 'in' operand obj1
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      249 bytes
     info: [1] no JavaScript
     file: 278d68b8e9edad4895836e272fbc8f78ec4f2f3e: 129738 bytes
     file: 656723ee39adf42c6408cc784df1814f80ba8536: 249 bytes

Decoded Files
278d/68b8e9edad4895836e272fbc8f78ec4f2f3e from sharecash.org/scriptaculous/lib/prototype.js (129738 bytes, 17730 hidden) download

6567/23ee39adf42c6408cc784df1814f80ba8536 from sharecash.org/scriptaculous/lib/prototype.js (249 bytes) download


sharecash.org/mint/?js benign
[nothing detected] (script) sharecash.org/mint/?js
     status: (referer=jafiles.net/1m65f2)saved 499 bytes 6c9d7400c84873e277e8180e4df860554f0e3fc8
     info: [0] no JavaScript
     file: 6c9d7400c84873e277e8180e4df860554f0e3fc8: 499 bytes

Decoded Files
6c9d/7400c84873e277e8180e4df860554f0e3fc8 from sharecash.org/mint/?js (499 bytes, 12 hidden) download


sharecash.org/scriptaculous/src/scriptaculous.js benign
[nothing detected] (script) sharecash.org/scriptaculous/src/scriptaculous.js
     status: (referer=jafiles.net/1m65f2)saved 2644 bytes 6c445baf655cccb16ee2788714827ab186ed94bf
     info: [script] sharecash.org/scriptaculous/src/
     info: [decodingLevel=0] found JavaScript
     error: uncaught exception: script.aculo.us requires the Prototype JavaScript framework >= 1.6.0.3
     file: 6c445baf655cccb16ee2788714827ab186ed94bf: 2644 bytes

Decoded Files
6c44/5baf655cccb16ee2788714827ab186ed94bf from sharecash.org/scriptaculous/src/scriptaculous.js (2644 bytes, 154 hidden) download


www.google-analytics.com/ga.js benign
[nothing detected] (script) www.google-analytics.com/ga.js
     status: (referer=jafiles.net/1m65f2)saved 36639 bytes 8abc6d904daf62e13abe7a83bbeade555fb13d2e
     info: [decodingLevel=0] found JavaScript
     file: 8abc6d904daf62e13abe7a83bbeade555fb13d2e: 36639 bytes

Decoded Files
8abc/6d904daf62e13abe7a83bbeade555fb13d2e from www.google-analytics.com/ga.js (36639 bytes) download


jafiles.net/1m65f2 benign
[nothing detected] jafiles.net/1m65f2
     status: (referer=http:/www.twitter.com/trends/)saved 21156 bytes 4e85be26df7bf7f12b9f151e8c6af0b9851bd1a9
     info: [script] sharecash.org/scriptaculous/lib/prototype.js
     info: [script] sharecash.org/scriptaculous/src/scriptaculous.js
     info: [script] sharecash.org/scriptaculous/src/unittest.js
     info: [script] www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4
     info: [img] jafiles.net/images/home-normal.jpg
     info: [img] jafiles.net/images/register-normal.jpg
     info: [img] jafiles.net/images/log-in-normal.jpg
     info: [img] jafiles.net/images/earn-money-normal.jpg
     info: [img] jafiles.net/images/contact-normal.jpg
     info: [img] jafiles.net/images/content-top.jpg
     info: [img] sharecash.org/premref.php?ref=1597020
     info: [img] jafiles.net/images/buy-1-normal.jpg
     info: [img] jafiles.net/images/buy-2-normal.jpg
     info: [img] jafiles.net/images/content-bottom.jpg
     info: [img] static.sharecash.org/img/main/box-1-top2.png
     info: [img] static.sharecash.org/img/main/close.jpg
     info: [iframe] sharecash.org/choice.php?f=1597020&id=26332336&block=0
     info: [img] static.sharecash.org/img/main/box-2-top.jpg
     info: [img] static.sharecash.org/img/main/box-2-bottom.jpg
     info: [img] static.sharecash.org/img/main/box-1-bottom2.png
     info: [iframe] sharecash.org/checkframe.php?id=26332336
     info: [script] sharecash.org/mint/?js
     info: [decodingLevel=0] found JavaScript
     info: [var gaJsHost] URL=www.
     info: [var newurl] URL=www.
     info: [script] www.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript
     file: 4e85be26df7bf7f12b9f151e8c6af0b9851bd1a9: 21156 bytes
     file: b240dfcd5be575459a1fe6cdb8d7d441337ac0c3: 192 bytes

Decoded Files
4e85/be26df7bf7f12b9f151e8c6af0b9851bd1a9 from jafiles.net/1m65f2 (21156 bytes, 189 hidden) download

b240/dfcd5be575459a1fe6cdb8d7d441337ac0c3 from jafiles.net/1m65f2 (192 bytes) download


www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4 benign
[nothing detected] (script) www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4
     status: (referer=jafiles.net/1m65f2)saved 4741 bytes fbeac027d4d9ee8183156077feb323da148bcae2
     info: [javascript variable] URL=cpalead.com/exitpopup-lander-slotmachine.php?pub=9483&gateid=205188
     info: [iframe] www.cpalead.com/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.links
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.links = 1;
          error: line:1: ....^
     file: fbeac027d4d9ee8183156077feb323da148bcae2: 4741 bytes

Decoded Files
fbea/c027d4d9ee8183156077feb323da148bcae2 from www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4 (4741 bytes, 561 hidden) download


sharecash.org/choice.php?f=1597020&id=26332336&block=0 benign
[nothing detected] (iframe) sharecash.org/choice.php?f=1597020&id=26332336&block=0
     status: (referer=jafiles.net/1m65f2)saved 7497 bytes e304f4933f2c7989135df6e034739b1e7b302618
     info: [decodingLevel=0] found JavaScript
     error: line:5: SyntaxError: missing = in XML attribute:
          error: line:5: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:5: ...............^
     file: e304f4933f2c7989135df6e034739b1e7b302618: 7497 bytes

Decoded Files
e304/f4933f2c7989135df6e034739b1e7b302618 from sharecash.org/choice.php?f=1597020&id=26332336&block=0 (7497 bytes, 79 hidden) download


www.cpalead.com/ benign
[nothing detected] (iframe) www.cpalead.com/
     status: (referer=www.cpalead.com/exitpopup.php?pub=9483&gateid=MjA1MTg4)saved 15926 bytes b1d4931401dae7a6f080a45943ec3aa4cbb0856d
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js
     info: [script] ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js
     info: [script] www.cpalead.com/js/jquery/detectmobilebrowser.js
     info: [script] www.cpalead.com/assets/js/colorbox/jquery.colorbox-min.js
     info: [script] www.cpalead.com/assets/js/jquery.scrollTo-1.3.3.js
     info: [script] www.cpalead.com/assets/js/jquery.localscroll-1.2.5.js
     info: [script] www.cpalead.com/assets/js/jquery.serialScroll-1.2.1.js
     info: [script] www.cpalead.com/assets/js/functions.js
     info: [script] www.cpalead.com/assets/js/modernizr-1.7.min.js
     info: [script] www.cpalead.com/assets/js/selectivizr.js
     info: [script] use.typekit.com/dau3fap.js
     info: [img] www.cpalead.com/assets/img/MONETIZEdigital.png
     info: [img] www.cpalead.com/assets/img/poster.png
     info: [img] www.cpalead.com/assets/img/landingMmdigital.png
     info: [img] www.cpalead.com/assets/img/getStartedNow.png
     info: [img] www.cpalead.com/assets/img/read
     info: [img] www.cpalead.com/assets/img/payments.png
     info: [img] www.cpalead.com/assets/img/3.5.12.png
     info: [img] www.cpalead.com/assets/img/CPAsocial.png
     info: [img] www.cpalead.com/assets/img/shadow.png
     info: [img] www.cpalead.com/assets/img/midN1.png
     info: [img] www.cpalead.com/assets/img/midN2.png
     info: [img] www.cpalead.com/assets/img/midN3.png
     info: [img] www.cpalead.com/assets/img/midN4.png
     info: [img] www.cpalead.com/assets/img/cpaleadOfficeP1.jpg
     info: [img] www.cpalead.com/assets/img/quad.jpg
     info: [img] www.cpalead.com/assets/img/chart.jpg
     info: [img] www.cpalead.com/assets/img/title.png
     info: [script] www.cpalead.com/assets/js/twitter-text-1.4.10.js
     info: [img] www.cpalead.com/assets/img/sm.jpg
     info: [img] www.cpalead.com/assets/img/inc500_logo.png
     info: [img] www.cpalead.com/assets/img/BB_logo.png
     info: [img] www.cpalead.com/assets/img/HotCandT-2012.png
     info: [img] www.cpalead.com/assets/img/facebook.png
     info: [img] www.cpalead.com/assets/img/twitter.png
     info: [img] www.cpalead.com/assets/img/icons/feed.png
     info: [img] www.cpalead.com/assets/img/MONETIZEsm.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable $
     error: undefined function $
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: b1d4931401dae7a6f080a45943ec3aa4cbb0856d: 15926 bytes
     file: 24d389ceff01a0b55a87905ea7e59588751bb778: 18192 bytes
     file: a8cd57a09a0cfc0eb34fd138cce105f2e93f7182: 18354 bytes
     file: a09261215174ecc467551fb2756c883c460e6334: 18068 bytes
     file: 3538e20bbcf6b16ada6535d73826906837c5fb71: 18192 bytes
     file: 98c6faa12873a78ad2bec639b7266e5b5d3a5b18: 16112 bytes
     file: e1ee3a4deb1b4fb4742f87ef248c669ad7ad2714: 16118 bytes
     file: 9017e5dd6a545e77fd4d19b292c5bf70585eb084: 16327 bytes
     file: 0222246efa0de68daa7d7f71ac7d8c9861223ad1: 16519 bytes
     file: f22f60a6d931eb15a2cec99ff8a113dd62a16657: 16233 bytes
     file: 8cad970258c560b43108416ca3f4e58d323c541d: 16357 bytes

Decoded Files
b1d4/931401dae7a6f080a45943ec3aa4cbb0856d from www.cpalead.com/ (15926 bytes, 985 hidden) download

24d3/89ceff01a0b55a87905ea7e59588751bb778 from www.cpalead.com/ (18192 bytes, 136 hidden) download

a8cd/57a09a0cfc0eb34fd138cce105f2e93f7182 from www.cpalead.com/ a092/61215174ecc467551fb2756c883c460e6334 from www.cpalead.com/ 3538/e20bbcf6b16ada6535d73826906837c5fb71 from www.cpalead.com/ 98c6/faa12873a78ad2bec639b7266e5b5d3a5b18 from www.cpalead.com/ e1ee/3a4deb1b4fb4742f87ef248c669ad7ad2714 from www.cpalead.com/ 9017/e5dd6a545e77fd4d19b292c5bf70585eb084 from www.cpalead.com/ 0222/246efa0de68daa7d7f71ac7d8c9861223ad1 from www.cpalead.com/ f22f/60a6d931eb15a2cec99ff8a113dd62a16657 from www.cpalead.com/ 8cad/970258c560b43108416ca3f4e58d323c541d from www.cpalead.com/

sharecash.org/checkframe.php?id=26332336 benign
[nothing detected] (iframe) sharecash.org/checkframe.php?id=26332336
     status: (referer=jafiles.net/1m65f2)saved 73 bytes 7a827eb61db5e3139d3a2100c5bc7e24a701906d
     info: [meta refresh] URL=sharecash.org/checkframe.php?id=26332336
     info: [0] no JavaScript
     file: 7a827eb61db5e3139d3a2100c5bc7e24a701906d: 73 bytes

Decoded Files
7a82/7eb61db5e3139d3a2100c5bc7e24a701906d from sharecash.org/checkframe.php?id=26332336 (73 bytes) download


sharecash.org/scriptaculous/src/unittest.js benign
[nothing detected] (script) sharecash.org/scriptaculous/src/unittest.js
     status: (referer=jafiles.net/1m65f2)saved 20209 bytes 1f7e4e8c4d6f0ee80fe797485593b6c4c94d4bca
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Event
     error: undefined variable Class
     error: undefined function Class.create
     file: 1f7e4e8c4d6f0ee80fe797485593b6c4c94d4bca: 20209 bytes

Decoded Files
1f7e/4e8c4d6f0ee80fe797485593b6c4c94d4bca from sharecash.org/scriptaculous/src/unittest.js (20209 bytes, 2453 hidden) download