JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link baf58614bbb46b513934fa9b151493f7118411ab (Received 2012-11-30 22:34:26, http://letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/winzip_cracked_version_free.exe.html )

URLStatus
letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html saved 31026 bytes 30c39f02fcd72f53f16a705020a2cfd1a4eef962

adv.letitbit.net/ status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/)

www.facebook.com/plugins/like.php?locale=US&href=http:/www.facebook.com/iMesh&layout=standard&faces=false&width=265&action=like&colorscheme=light&height=42 status: (referer=ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3)

adv.letitbit.net/content/?pid=1&sid=261& status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)

letitbit.net/js/undefined status: (referer=letitbit.net/js/jquery-1.8.3.min.js)

api.recaptcha.net/challenge?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)

letitbit.net/js/swfobject.js status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)

letitbit.net/js/download.js?ver=120221 status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/)

adv.letitbit.net/content/?pid=1&sid=232& status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)

letitbit.net/js/stat.js status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/)

ad.propellerads.com/ status: (referer=ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3)

ad.propellerads.com/fl.js status: (referer=ad.propellerads.com/afr.php?zoneid=562&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3)

advstat.letitbit.net/found.html status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/)

ad.propellerads.com/slider.php status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)

ad.propellerads.com/scripts/lp.js status: (referer=ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3)

Warning: reading file /storagefiles/c046//0650d8bba06ddc0aff159b583e2b2ec59966 failed
Warning: reading file /storagefiles/1425//28891a7f7796fe8a0ed1743bfe67671a503f failed
Warning: reading file /storagefiles/97d0//82a7901dba5c454b159fcf1c773b8c2da3ed failed
Warning: reading file /storagefiles/245c//61e4bf03e6b3e61e19738ade6dc757b844a9 failed
Warning: reading file /storagefiles/b4cd//a75140e3e615ec7b4717eb08c9af219e93f7 failed
Warning: reading file /storagefiles/2fa9//bcfdf75bdadd9247a60e1777619f19dac88c failed
Warning: reading file /storagefiles/a13f//7e7a4075a532f5d15fbb3479e860cec90467 failed
Warning: reading file /storagefiles/daf1//3543cc93a0180ba4485be363f928cf161c25 failed
Warning: reading file /storagefiles/a230//796e45fd009ab86fc3281071ee4c40e33956 failed
Warning: reading file /storagefiles/8451//f3f67a7960cbeae6491193112960cdee2eed failed
Warning: reading file /storagefiles/d827//46345cb3b71d6800d057a303bc428b10c80b failed
Warning: reading file /storagefiles/ad93//f8cbdd6e1dc59f47342e2f98461186cc3fc0 failed

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html benign
[nothing detected] letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html
     status: (referer=http:/www.ask.com/web?q=puppies)saved 31026 bytes 30c39f02fcd72f53f16a705020a2cfd1a4eef962
     info: [javascript variable] URL=ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3
     info: [javascript variable] URL=adv.letitbit.net/content/?pid=1&sid=261&
     info: [javascript variable] URL=ad.propellerads.com/ajs.php
     info: [javascript variable] URL=adv.letitbit.net/content/?pid=1&sid=232&
     info: [javascript variable] URL=ad.propellerads.com/slider.php
     info: [script] letitbit.net/js/download.js?ver=120221
     info: [script] letitbit.net/js/jquery-1.8.3.min.js
     info: [script] letitbit.net/js/jquery-ui-1.8.23.custom.min.js
     info: [img] letitbit.net/images/icons/ajax.gif
     info: [script] letitbit.net/js/swfobject.js
     info: [iframe] ad.propellerads.com/afr.php?zoneid=562&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3
     info: [script] letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/
     info: [script] api.recaptcha.net/challenge?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM
     info: [iframe] api.recaptcha.net/noscript?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM
     info: [img] letitbit.net/images/found/
     info: [img] ad.propellerads.com/lg.php?bannerid=1795&campaignid=506&zoneid=646
     info: [img] letitbit.net/images/icons/waiting.gif
     info: [iframe] ad.propellerads.com/afr.php?zoneid=134&cb=INSERT_RANDOM_NUMBER_HERE
     info: [img] ad.propellerads.com/avw.php?zoneid=134&cb=INSERT_RANDOM_NUMBER_HERE&n=ae1300e6
     info: [img] ad.propellerads.com/avw.php?zoneid=355&cb=INSERT_RANDOM_NUMBER_HERE&n=ae619524
     info: [img] www.megastock.ru/Doc/88x31_accept/rus.gif
     info: [img] trafit.com/counter/counter.php?ref=
     info: [script] letitbit.net/js/stat.js
     info: [img] up1.letitbit.net/counter/?domain=letitbit.net&img
     info: [img] letitbit.net/images/downloader/1.png
     info: [img] letitbit.net/images/downloader/2.png
     info: [img] letitbit.net/images/downloader/3.png
     info: [img] mc.yandex.ru/watch/15989755
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: 30c39f02fcd72f53f16a705020a2cfd1a4eef962: 31026 bytes

Decoded Files
30c3/9f02fcd72f53f16a705020a2cfd1a4eef962 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html (31026 bytes, 4712 hidden) download


api.recaptcha.net/noscript?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM benign
[nothing detected] (iframe) api.recaptcha.net/noscript?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 1821 bytes c1116cb15f2a6adc49546c29f66d85e790c47eca
     info: [img] api.recaptcha.net/image?c=03AHJ_VutNmxPprEdIGLRMxr2v2yULUDaaPZ_A0J1BjV5mkgS0RuR-odQ_40nitHEDP-MwDedmXwfb5Azv1q1tF3MiDoz1PiSE98a7-VbndxJZft8d6UP1fsycfWNPLKZVYOsdZQ_qQJbbaww8zZ-a6cAMap40sf2kJUogTK0ARVHTxiMGeb4nuUFjIsCkMzyoNuKmequVB
     file: c1116cb15f2a6adc49546c29f66d85e790c47eca: 1821 bytes

Decoded Files
c111/6cb15f2a6adc49546c29f66d85e790c47eca from api.recaptcha.net/noscript?k=6Lc9zdMSAAAAAF-7s2wuQ-036pLRbM0p8dDaQdAM (1821 bytes) download


ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3 benign
[nothing detected] (jsvar) ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 11133 bytes af938ea7e167f85d9e13767b419cb1274d2bb250
     info: [script] ad.propellerads.com/scripts/lp.js
     info: [iframe] ad.propellerads.com/
     info: [iframe] www.facebook.com/plugins/like.php?locale=US&amp;href=http%3A%2F%2Fwww.facebook.com%2FiMesh&amp;layout=standard&amp;faces=false&amp;width=265&amp;action=like&amp;colorscheme=light&amp;height=42
     info: [img] ad.propellerads.com/images/1/popupClose.gif
     info: [img] ad.propellerads.com/images/1/popupBtn.gif
     file: af938ea7e167f85d9e13767b419cb1274d2bb250: 11133 bytes

Decoded Files
af93/8ea7e167f85d9e13767b419cb1274d2bb250 from ad.propellerads.com/afu.php?zoneid=250&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3 (11133 bytes, 1867 hidden) download


letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ benign
[nothing detected] (script) letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 23442 bytes 64bf25e15f5c6e6d8c7ba1c3751e0f4a676807a0
     info: [javascript variable] URL=advstat.letitbit.net/found.html
     info: [javascript variable] URL=adv.letitbit.net
     info: [javascript variable] URL=ad.propellerads.com/ajs.php
     info: [script] letitbit.net/js/download.js?ver=120221
     info: [script] letitbit.net/js/jquery-1.8.3.min.js
     info: [script] letitbit.net/js/jquery-ui-1.8.23.custom.min.js
     info: [img] letitbit.net/images/icons/ajax.gif
     info: [script] letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/
     info: [img] up1.letitbit.net/?domain=letitbit.net&img
     info: [img] ad.propellerads.com/avw.php?zoneid=332&cb=INSERT_RANDOM_NUMBER_HERE&n=ae7e4517
     info: [script] letitbit.net/js/stat.js
     info: [img] up1.letitbit.net/counter/?domain=letitbit.net&img
     info: [img] letitbit.net/images/downloader/1.png
     info: [img] letitbit.net/images/downloader/2.png
     info: [img] letitbit.net/images/downloader/3.png
     info: [img] mc.yandex.ru/watch/15989755
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 64bf25e15f5c6e6d8c7ba1c3751e0f4a676807a0: 23442 bytes
     file: c0460650d8bba06ddc0aff159b583e2b2ec59966: 79889 bytes
     file: 142528891a7f7796fe8a0ed1743bfe67671a503f: 79895 bytes
     file: 97d082a7901dba5c454b159fcf1c773b8c2da3ed: 80104 bytes
     file: 245c61e4bf03e6b3e61e19738ade6dc757b844a9: 80296 bytes
     file: b4cda75140e3e615ec7b4717eb08c9af219e93f7: 80010 bytes
     file: 2fa9bcfdf75bdadd9247a60e1777619f19dac88c: 80134 bytes
     file: a13f7e7a4075a532f5d15fbb3479e860cec90467: 23726 bytes
     file: daf13543cc93a0180ba4485be363f928cf161c25: 23732 bytes
     file: a230796e45fd009ab86fc3281071ee4c40e33956: 23941 bytes
     file: 8451f3f67a7960cbeae6491193112960cdee2eed: 24133 bytes
     file: d82746345cb3b71d6800d057a303bc428b10c80b: 23847 bytes
     file: ad93f8cbdd6e1dc59f47342e2f98461186cc3fc0: 23971 bytes

Decoded Files
64bf/25e15f5c6e6d8c7ba1c3751e0f4a676807a0 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ (23442 bytes, 4139 hidden) download

c046/0650d8bba06ddc0aff159b583e2b2ec59966 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ 1425/28891a7f7796fe8a0ed1743bfe67671a503f from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ 97d0/82a7901dba5c454b159fcf1c773b8c2da3ed from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ 245c/61e4bf03e6b3e61e19738ade6dc757b844a9 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ b4cd/a75140e3e615ec7b4717eb08c9af219e93f7 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ 2fa9/bcfdf75bdadd9247a60e1777619f19dac88c from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ a13f/7e7a4075a532f5d15fbb3479e860cec90467 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ daf1/3543cc93a0180ba4485be363f928cf161c25 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ a230/796e45fd009ab86fc3281071ee4c40e33956 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ 8451/f3f67a7960cbeae6491193112960cdee2eed from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ d827/46345cb3b71d6800d057a303bc428b10c80b from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/ ad93/f8cbdd6e1dc59f47342e2f98461186cc3fc0 from letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/

ad.propellerads.com/ajs.php benign
[nothing detected] (jsvar) ad.propellerads.com/ajs.php
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 52 bytes c73193a335735e4537267bd00c53042e032ea4c1
     info: [decodingLevel=0] found JavaScript
     file: c73193a335735e4537267bd00c53042e032ea4c1: 52 bytes

Decoded Files
c731/93a335735e4537267bd00c53042e032ea4c1 from ad.propellerads.com/ajs.php (52 bytes) download


letitbit.net/js/jquery-ui-1.8.23.custom.min.js benign
[nothing detected] (script) letitbit.net/js/jquery-ui-1.8.23.custom.min.js
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 73662 bytes 4dfd506a566af15432a7fcabce0cb801916caf5c
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable a.ui
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var a.ui = 1;
          error: line:1: ....^
     file: 4dfd506a566af15432a7fcabce0cb801916caf5c: 73662 bytes

Decoded Files
4dfd/506a566af15432a7fcabce0cb801916caf5c from letitbit.net/js/jquery-ui-1.8.23.custom.min.js (73662 bytes) download


letitbit.net/js/jquery-1.8.3.min.js benign
[nothing detected] (script) letitbit.net/js/jquery-1.8.3.min.js
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 93636 bytes 06e872300088b9ba8a08427d28ed0efcdf9c6ff5
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=letitbit.net/js/undefined
     info: [1] no JavaScript
     file: 06e872300088b9ba8a08427d28ed0efcdf9c6ff5: 93636 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
06e8/72300088b9ba8a08427d28ed0efcdf9c6ff5 from letitbit.net/js/jquery-1.8.3.min.js (93636 bytes) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from letitbit.net/js/jquery-1.8.3.min.js (72 bytes) download


ad.propellerads.com/afr.php?zoneid=562&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3 benign
[nothing detected] (iframe) ad.propellerads.com/afr.php?zoneid=562&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 2305 bytes bfe7a696ed0c1ce3de8b026db7db98c2ee5537db
     info: [script] ad.propellerads.com/fl.js
     info: [img] img.propellerads.com/www/images/1x1.gif
     info: [img] ad.propellerads.com/lg.php?bannerid=5474&amp;campaignid=1026&amp;zoneid=562&amp;loc=http%3A%2F%2Fletitbit.net%2Fdownload%2F1525508%2F17121.1645bbe45540c0e3d66484375892%2Ffree.exe.html&amp;cb=f0b6f861b0&amp;lbwm=9477722&amp;lbhs=4232c83c6f68288bf4cef396c324263150b97ac3
     info: [decodingLevel=0] found JavaScript
     error: undefined variable FlashObject
     error: line:9: TypeError: FlashObject is not a constructor
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC '-/W3C/DTD XHTML 1.0 Transitional/EN' 'http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
          error: line:3: ...............^
     file: bfe7a696ed0c1ce3de8b026db7db98c2ee5537db: 2305 bytes

Decoded Files
bfe7/a696ed0c1ce3de8b026db7db98c2ee5537db from ad.propellerads.com/afr.php?zoneid=562&cb=556268741842&lbwm=9477722&lbhs=4232c83c6f68288bf4cef396c324263150b97ac3 (2305 bytes, 31 hidden) download


ad.propellerads.com/afr.php?zoneid=134&cb=INSERT_RANDOM_NUMBER_HERE benign
[nothing detected] (iframe) ad.propellerads.com/afr.php?zoneid=134&cb=INSERT_RANDOM_NUMBER_HERE
     status: (referer=letitbit.net/download/1525508/17121.1645bbe45540c0e3d66484375892/free.exe.html)saved 1595 bytes a4d8c76d74f7cc43672647a714539797c828debd
     info: [img] img.propellerads.com/www/images/fa2172d119bccd9c809aa329c90dbe69.gif
     info: [img] ad.propellerads.com/lg.php?bannerid=1237&amp;campaignid=203&amp;zoneid=134&amp;loc=http%3A%2F%2Fletitbit.net%2Fdownload%2F1525508%2F17121.1645bbe45540c0e3d66484375892%2Ffree.exe.html&amp;cb=47ed05f304
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC '-/W3C/DTD XHTML 1.0 Transitional/EN' 'http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
          error: line:3: ...............^
     file: a4d8c76d74f7cc43672647a714539797c828debd: 1595 bytes

Decoded Files
a4d8/c76d74f7cc43672647a714539797c828debd from ad.propellerads.com/afr.php?zoneid=134&cb=INSERT_RANDOM_NUMBER_HERE (1595 bytes) download