9b

//preserve originals
var ori = function() {
    var self = this;
    this.unescape = unescape;
    this.alert = alert;
    this.eval = eval;
    this.fromCharCode = String.fromCharCode;

    this.call_unescape = function(e) {
        document.write("<br>original unescape was passed data");

9b

#!/usr/bin/python

# module with simple class to build PDF documents with basic PDF elements
# Source code put in public domain by Didier Stevens, no Copyright
# https://DidierStevens.com
# Use at your own risk
#
# History:
#  
#  2008/05/18: continue

9b

#!/usr/bin/python

# V0.1 2008/05/23
# make-pdf-javascript, use it to create a PDF document with embedded JavaScript that will execute automatically when the document is opened
# requires module mPDF.py
# Source code put in public domain by Didier Stevens, no Copyright
# https://DidierStevens.com
# Use at your own risk
#
# History:

9b

package
{
    import flash.display.MovieClip;
    import flash.display.SimpleButton;
    import flash.display.Shape;
    import flash.events.Event;
    import flash.events.MouseEvent;

    import flash.net.*;

9b

__description__ = 'Analyzes Malicious PDF Object in Memory'
__author__ = 'Brandon Dixon'
__version__ = '1.0'
__date__ = '2011/11/07'

from object_builder import *
import simplejson as json
import optparse
import malobjclass
import codecs

9b

import simplejson as json
from pymongo import Connection
from bson.code import Code

#cheap connection
def connect_to_mongo(host, port, database, collection):
        connection = Connection(host, port)
        db = connection[database]
        collection = db[collection]
        return collection

9b

from jabberbot import JabberBot, botcmd
import datetime
import base64
import pymongo
import traceback
import simplejson as json
import os, sys, csv, zipfile, getopt, traceback, socket, urlparse, time, urllib2, string
import StringIO
import logging

9b

var map = function () { 
    this.scans.virustotal.report.results.scanners.forEach( 
        function (z) { 
             emit(z.antivirus, {signatures: [z.signature] , count: 1, total: 0}); 
        } 
    ); 
} 

var reduce = function (key, values) { 
    var count = 0; 

9b

var map = function () {
    this.structure.components.component.forEach(
		function (z) {
			emit(z.name, {count: 0, total: z.count, avg:0});
		}
	);
}

var reduce = function (key, values) {
    var count = db.malware.count();

9b

var map = function () {
    this.structure.keywords.keyword.forEach(function (z) {emit(z.name, {count_hex: z.hexcodecount, count:1});});
}

var reduce = function (key, values) {
    var total = 0;
    var count = 0;
    for (var i = 0; i < values.length; i++) {
if (values[i].count_hex > 0) {
        total += values[i].count_hex;