4 ms·

How was the JS obfuscated? Did they, by any chance, use [1]? AFAIK that tool includes a very similar anti-debugging technique. [1] https://github.com/javascri

• nneonneo 8y ago
  They did a first pass obfuscation which replaced local variable names with gibberish and then applied some minification. Then they applied an obfuscation tool 2-3 times for each of the three code snippets, causing the code to bloat up quite considerably. However, at least two different obfuscation tools were used - one simpler one (used for the antidebugger hook) and one more complex one that looked almost like a virtual machine. The output looks a little like the output from your link, but there's a lot of structural differences so I'm not sure it was the same tool.