generic_javascript_obfuscation5 in www.vardishotel.gr

On 2020-06-30T21:47:17.246754+00:00 we found pattern generic_javascript_obfuscation5, type: Suspicious, (JavaScript obfuscation is frequently used to hide malicious code (or with hope to protect intellectual property)) in the page https://www.vardishotel.gr/sre_files/js… referenced from http://www.vardishotel.gr/ .

Code sample:

b'[""]={closeText:"Done",\xc2\xa6\xc2\xb7\xc2\xafM\xc3\xacm:"Prev",\xc2\x9d\xc3\xacmM\xc3\xacm:"Next",currentText:"Today",monthNames:["January","\x15\xc3\xa6\xc3\xab\xc2\xb9\xc2\xaa\xc3\xb2","March","April","May","June","July","August","September","October","6\xc2\x8b\xc3\x9e\xc2\x99\xc2\xb7\xc2\xab",' … b'["January","\x15\xc3\xa6\xc3\xab\xc2\xb9\xc2\xaa\xc3\xb2","March","April","May","June","July","August","September","October","6\xc2\x8b\xc3\x9e\xc2\x99\xc2\xb7\xc2\xab",' … b'["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],u\xc2\xac\xc2\x8djg\xc2\xac:["Sunday","Monday","Tuesday","Wednesday","N\x1b\xc2\xab\xc2\xb1\xc3\x96\xc2\xb2","Friday","I\xc2\xabn\xc2\xad\xc3\x96\xc2\xb2"],u\xc2\xac\xc2\x8djg\xc2\xacShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],u\xc2\xac\xc2\x8djg\xc2\xacMin:["Su",\n"Mo","Tu","We","Th","Fr","Sa"],weekHeader:"Wk",dateFormat:"\xc2\x9ao\xc3\x9dw\xc3\xbc\xc2\xb2",~*\xc3\xac\xc2\xb46\xc2\xb2:0,isRTL:false,showMonthAfterYear:false,yearSuffix:""};this._u\xc3\xa7\xc3\x9a\xc2\xba[l={showOn:"focus",\xc2\xb2\x1a0\x02x\xc2\xa6:"fadeIn",showOptions:{},defaultDate:null,appendText:"",buttonText:"...",buttonImage:"",buttonIma' … b'["Sunday","Monday","Tuesday","Wednesday","N\x1b\xc2\xab\xc2\xb1\xc3\x96\xc2\xb2","Friday","I\xc2\xabn\xc2\xad\xc3\x96\xc2\xb2"],u\xc2\xac\xc2\x8djg\xc2\xacShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],u\xc2\xac\xc2\x8djg\xc2\xacMin:["Su",\n"Mo","Tu","We","Th","Fr","Sa"],weekHeader:"Wk",dateFormat:"\xc2\x9ao\xc3\x9dw\xc3\xbc\xc2\xb2",~*\xc3\xac\xc2\xb46\xc2\xb2:0,isRTL:false,showMonthAfterYear:false,yearSuffix:""};this._u\xc3\xa7\xc3\x9a\xc2\xba[l={showOn:"focus",\xc2\xb2\x1a0\x02x\xc2\xa6:"fadeIn",showOptions:{},defaultDate:null,appendText:"",buttonText:"...",buttonImage:"",buttonImageOnly:false,\xc2\x86\'^!\xc3\xb3h>\xc2\xb7\xc2\xaf5\xc3\xacm:false,navigationAsDateFormat:false,gotoCurrent:false,' … b'["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],u\xc2\xac\xc2\x8djg\xc2\xacMin:["Su",\n"Mo","Tu","We","Th","Fr","Sa"],weekHeader:"Wk",dateFormat:"\xc2\x9ao\xc3\x9dw\xc3\xbc\xc2\xb2",~*\xc3\xac\xc2\xb46\xc2\xb2:0,isRTL:false,showMonthAfterYear:false,yearSuffix:""};this._u\xc3\xa7\xc3\x9a\xc2\xba[l={showOn:"focus",\xc2\xb2\x1a0\x02x\xc2\xa6:"fadeIn",showOptions:{},defaultDate:null,appendText:"",buttonText:"...",buttonImage:"",buttonImageOnly:false,\xc2\x86\'^!\xc3\xb3h>\xc2\xb7\xc2\xaf5\xc3\xacm:false,navigationAsDateFormat:false,gotoCurrent:false,changeMonth:false,changeYear:false,yearRange:"c-10:c+10",showOtherMonths:false,selectOtherMo'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!