Up for a challenge?

  • RedFlash
    12th Sep 2013 Member 0 Permalink

    Herro again,

     

    EDIT: I managed to convert it. I'll leave this post up for other people to have a play with :)

     

    I'm trying to isolate and dissect a virus, but I'm having a few issues. I've managed to isolate a java/javscript virus (Exploit.JS.Bacole.IE). It starts out as a webpage with javascript code. When run, it writes a bunch of characters into what seems to be a jar file and runs it. I've tried to convert the arrays of code into something that can be read by the computer, but everything I've tried hasn't worked. I've tried ASCII decimals to text, Unicode decimals to text and written a program to decipher it but it's all failed. I was wondering if anyone would be able to help me on this?

     

    Here is a link to the necessary files: https://app.box.com/s/frawldorl81uk7t9pgbw

    I stress that it is important to remember that this is live code, and if run, WILL cause damage to your computer. Download at your own risk.

     

    The file "Exploit.Js.Blacole.IE" contains the javascript/html code that executes the virus. The extension has been removed incase of accidental execution. The file "ascii.txt" contains the complete contents of the arrays mentioned in the javascript code. Replace full stops with spaces. The other file is just a failed conversion I ran.

     

    TL;DR: I am trying to convert a bunch of decimal character codes to something readable by a machine. The code is a virus (I am fully aware of that and am trying to dissect it) and is supposed to constitute a .JAR file (I think)


    Cheers,

     

    RedFlash

    Edited 2 times by RedFlash. Last: 12th Sep 2013
  • Box-Poorsoft
    12th Sep 2013 Banned 0 Permalink
    This post is hidden because the user is banned
  • boxmein
    12th Sep 2013 Former Staff 0 Permalink
    It's most likely just the jar file's contents.
  • xetalim
    12th Sep 2013 Member 0 Permalink

    What is the challenge for us.

  • boxmein
    12th Sep 2013 Former Staff 0 Permalink
    @xetalim (View Post)
    The challenge is to do his work for him.
  • greymatter
    13th Sep 2013 Member 0 Permalink
    @RedFlash (View Post)
    I enjoy coding viruses, although I don't know how to make it a "virus" in any way..
    Once I managed to make a computer shutdown as soon as it started every time.Then I had to boot in linux to get rid of it =P
    Edited once by greymatter. Last: 13th Sep 2013
  • mniip
    13th Sep 2013 Developer 1 Permalink
    @greymatter (View Post)
    never develop viruses on hardware, always use software emulation
  • china-richway2
    14th Sep 2013 Member 0 Permalink

    You should try change your language to VBScript.