Peter Ferrie
Virus Bulletin, February 2011, pp. 4-7
ISSN 0956-9979
February 2011
Download PDF (58.88Kb) (You need to be registered on forum)Imagine a JavaScript encoding method that produces files that contain no alphanumeric characters, only symbols such as ‘$’, ‘_’, and ‘+’. It would be difficult to imagine how it could possibly work, but unfortunately one such encoder exists. It is called ‘JJEncode’. A demonstration version is freely available from the author’s website, and has already been used in malware. This article provides a detailed description of how it works.