In this paper, we propose a framework for effective hidden malware detection through an automated deobfuscation regardless of advanced obfuscation techniques with overriding JavaScript functions and a separate JavaScript interpreter through to improve jsunpack-n. To overcome the limitation of previous pattern matching for network intrusion detection systems, a novel deobfuscating method to handle obfuscated Javascript is needed. Though various methods have proposed to detect Javascript malware on a users’ web browser, the overall detection is needed to counter advanced attacks such as APTs(Advanced Persistent Treats), aimed at penetration into a certain an organization’s intranet. A JavaScript deobfuscator is an online tool that can help you to reverse the process of obfuscation by revealing the true code structure and logic. Thus, pattern matching for network intrusion detection systems has difficulty of detecting malware. Using Javascript Obfuscation, recent web-based malware hide a malicious URL and the exploit code.

With the growth of Web services and the development of web exploit toolkits, web-based malware has increased dramatically.

Deobfuscate js