Script Deobfuscator Updated

Continuing from my last blog post, I updated the program to handle the latest obfuscated Javascript technique. I made the logic generic in order to handle future versions and variants so the results may come out a bit weird (e.g. stray tick marks). But the main thing is that you’ll be able to see what these scripts are doing.

I broke out the concatenation option by script type so this should improve the results somewhat better than before.

2016-02-22_01

2016-02-22_02

2016-02-22_03

I hope this works for most of the scripts you encounter. And thank you for your continued support!

This entry was posted in Malscript, Tools and tagged , , , . Bookmark the permalink.