JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link d158aa3a0817d3bc2adf631bc36f09bc5c20361c (Received 2013-08-04 02:28:06, www.newprostalkds.blogspot.in )

URLStatus
www.newprostalkds.blogspot.in saved 4078 bytes 1034c35e79a1e38e77e4b35cb8c74e40d3a13d7e

ads.lfstmedia.com/ status: (referer=ads.lfstmedia.com/getad?site=188034)

www.google-analytics.com/ga.js status: (referer=www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR)

74.53.143.237/images/hg728x90.swf?clickTAG=http:/secure.hostgator.com/cgi-bin/affiliates/clickthru.cgi?id=page404 status: (referer=stalkerxx.tk/undefined)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR benign
[nothing detected] (var newurl) www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR
     status: (referer=www.newprostalkds.blogspot.in/)saved 2803 bytes d5dc80ed784084d368fe53bc3c913be4bc315d66
     info: [img] www.blogger.com/img/blogger-logo-small.png
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.getElementsByTagName("body")[0]
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.getElementsByTagName("body")[0] = 1;
          error: line:1: ....^
     info: [element] URL=www.google-analytics.com/ga.js
     info: [1] no JavaScript
     file: d5dc80ed784084d368fe53bc3c913be4bc315d66: 2803 bytes
     file: 5809d3145354164e801df9c79cfd04f441bb2a83: 103 bytes

Decoded Files
d5dc/80ed784084d368fe53bc3c913be4bc315d66 from www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR (2803 bytes, 149 hidden) download

5809/d3145354164e801df9c79cfd04f441bb2a83 from www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR (103 bytes) download


stalkerxx.tk/jquery.js benign
[nothing detected] (script) stalkerxx.tk/jquery.js
     status: (referer=www.newprostalkds.blogspot.in/)saved 93871 bytes b245f612ba640b6f865e2dd28a4e0b71ee872c8a
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function q.getElementsByTagName
     error: undefined variable q
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     info: Decoding option browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP,      72 bytes
     info: [element] URL=stalkerxx.tk/undefined
     file: b245f612ba640b6f865e2dd28a4e0b71ee872c8a: 93871 bytes
     file: 2442ea2789e0f844b792d81b5bc9be9e9dd82e57: 94335 bytes
     file: 3ce4d4730ef63a9cabcb08f354286d4c15d17ce6: 94476 bytes
     file: b3b9eff5d3490e99b0bec4c50b089858d9ae6b01: 94190 bytes
     file: 1ee16173c2a102ec41ea8b0d6f03063ce2043203: 94314 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
b245/f612ba640b6f865e2dd28a4e0b71ee872c8a from stalkerxx.tk/jquery.js (93871 bytes, 2 hidden) download

2442/ea2789e0f844b792d81b5bc9be9e9dd82e57 from stalkerxx.tk/jquery.js (94335 bytes, 2 hidden) download

3ce4/d4730ef63a9cabcb08f354286d4c15d17ce6 from stalkerxx.tk/jquery.js (94476 bytes, 2 hidden) download

b3b9/eff5d3490e99b0bec4c50b089858d9ae6b01 from stalkerxx.tk/jquery.js (94190 bytes, 2 hidden) download

1ee1/6173c2a102ec41ea8b0d6f03063ce2043203 from stalkerxx.tk/jquery.js (94314 bytes, 2 hidden) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from stalkerxx.tk/jquery.js (72 bytes) download


stalkerxx.s3.amazonaws.com/undefined benign
[nothing detected] (element) stalkerxx.s3.amazonaws.com/undefined
     status: (referer=stalkerxx.s3.amazonaws.com/jquery.js)saved 268 bytes 7f69691f55476fed21c226045fec1cdd892e6eb0
     file: 7f69691f55476fed21c226045fec1cdd892e6eb0: 268 bytes

Decoded Files
7f69/691f55476fed21c226045fec1cdd892e6eb0 from stalkerxx.s3.amazonaws.com/undefined (268 bytes) download


morethan40.tk/index.php?token= benign
[nothing detected] (iframe) morethan40.tk/index.php?token=
     status: (referer=stalkerxx.s3.amazonaws.com/miley.js)saved 3291 bytes f2746331acb717cd5afd4d79c54661eff005f5b0
     info: [script] stalkerxx.s3.amazonaws.com/jquery.js
     file: f2746331acb717cd5afd4d79c54661eff005f5b0: 3291 bytes

Decoded Files
f274/6331acb717cd5afd4d79c54661eff005f5b0 from morethan40.tk/index.php?token= (3291 bytes, 573 hidden) download


www.blogger.com/static/v1/common/js/2216424884-csitail.js benign
[nothing detected] (script) www.blogger.com/static/v1/common/js/2216424884-csitail.js
     status: (referer=www.newprostalkds.blogspot.in/)saved 2262 bytes 88f3870becd1d4d369e787c257abaecf09e82e8d
     info: [decodingLevel=0] found JavaScript
     file: 88f3870becd1d4d369e787c257abaecf09e82e8d: 2262 bytes

Decoded Files
88f3/870becd1d4d369e787c257abaecf09e82e8d from www.blogger.com/static/v1/common/js/2216424884-csitail.js (2262 bytes) download


www.newprostalkds.blogspot.in/ benign
[nothing detected] www.newprostalkds.blogspot.in/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 4078 bytes 1034c35e79a1e38e77e4b35cb8c74e40d3a13d7e
     info: [script] stalkerxx.s3.amazonaws.com/jquery.js
     info: [script] stalkerxx.s3.amazonaws.com/miley.js
     info: [script] stalkerxx.tk/jquery.js
     info: [script] ads.lfstmedia.com/getad?site=188034
     info: [img] stalkerxx.s3.amazonaws.com/loading.gif
     info: [img] i.imgur.com/q1rPHwl.png
     info: [script] www.blogger.com/static/v1/common/js/2216424884-csitail.js
     info: [img] whos.amung.us/widget/3x9imrf922iv/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable LSM_Slot
     error: undefined function LSM_Slot
     info: [var like] URL=www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR
     info: [var newurl] URL=www.newprostalkds.blogspot.in/view-source:http:/bit.ly/12MoCuR
     info: [decodingLevel=1] found JavaScript
     file: 1034c35e79a1e38e77e4b35cb8c74e40d3a13d7e: 4078 bytes
     file: a5d58d7c20cb0341addfbdf27c986009238a59de: 128 bytes

Decoded Files
1034/c35e79a1e38e77e4b35cb8c74e40d3a13d7e from www.newprostalkds.blogspot.in/ (4078 bytes, 445 hidden) download

a5d5/8d7c20cb0341addfbdf27c986009238a59de from www.newprostalkds.blogspot.in/ (128 bytes) download


stalkerxx.s3.amazonaws.com/miley.js benign
[nothing detected] (script) stalkerxx.s3.amazonaws.com/miley.js
     status: (referer=www.newprostalkds.blogspot.in/)saved 6702 bytes fd6ae74f0c7be561773035aa164012e76d6156ea
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined function jQuery
     info: DecodedIframe detected
     info: [img] graph.facebook.com/
     info: [iframe] morethan40.tk/index.php?token=
     info: [decodingLevel=1] found JavaScript
     file: fd6ae74f0c7be561773035aa164012e76d6156ea: 6702 bytes
     file: e85e42c4da2a27aad92319f853b7562223e4c35e: 1686 bytes

Decoded Files
fd6a/e74f0c7be561773035aa164012e76d6156ea from stalkerxx.s3.amazonaws.com/miley.js (6702 bytes) download

e85e/42c4da2a27aad92319f853b7562223e4c35e from stalkerxx.s3.amazonaws.com/miley.js (1686 bytes) download


stalkerxx.tk/undefined benign
[nothing detected] (element) stalkerxx.tk/undefined
     status: (referer=stalkerxx.tk/jquery.js)saved 3354 bytes b1f1f47aafa5ecbbf8b8ba2f436321a1b76a401a
     info: [img] 74.53.143.237/images/gatorbottom.png
     info: [img] 74.53.143.237/images/x.png
     info: [embed] 74.53.143.237/images/hg728x90.swf?clickTAG=http:/secure.hostgator.com/cgi-bin/affiliates/clickthru.cgi?id=page404
     file: b1f1f47aafa5ecbbf8b8ba2f436321a1b76a401a: 3354 bytes

Decoded Files
b1f1/f47aafa5ecbbf8b8ba2f436321a1b76a401a from stalkerxx.tk/undefined (3354 bytes, 614 hidden) download


stalkerxx.s3.amazonaws.com/jquery.js benign
[nothing detected] (script) stalkerxx.s3.amazonaws.com/jquery.js
     status: (referer=www.newprostalkds.blogspot.in/)saved 92629 bytes ae49e56999d82802727455f0ba83b63acd90a22b
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function d.getElementsByTagName
     error: undefined variable d
     info: [element] URL=stalkerxx.s3.amazonaws.com/undefined
     info: [1] no JavaScript
     file: ae49e56999d82802727455f0ba83b63acd90a22b: 92629 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes

Decoded Files
ae49/e56999d82802727455f0ba83b63acd90a22b from stalkerxx.s3.amazonaws.com/jquery.js (92629 bytes) download

d5db/a94a76a67a54f2b98b16227da20414542fd9 from stalkerxx.s3.amazonaws.com/jquery.js (72 bytes) download


ads.lfstmedia.com/getad?site=188034 benign
[nothing detected] (script) ads.lfstmedia.com/getad?site=188034
     status: (referer=www.newprostalkds.blogspot.in/)saved 11295 bytes 4ab645713066df9f729f3f04d809e9fe26997872
     info: [iframe] ads.lfstmedia.com/
     info: [decodingLevel=0] found JavaScript
     file: 4ab645713066df9f729f3f04d809e9fe26997872: 11295 bytes

Decoded Files
4ab6/45713066df9f729f3f04d809e9fe26997872 from ads.lfstmedia.com/getad?site=188034 (11295 bytes) download