API tools faq
paste
dissectmalware

Binary - PTGS

dissectmalware
May 20th, 2020
339
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.56 KB | None | 0 0
raw download clone embed print report
  1. Opening workbook... Done! (0.012462615966796875 seconds)
  2. Reading sheet SheetRecord(state=<SheetState.VISIBLE: 0>, sheetId=2, rId='rId1', name='Macro1', type='macrosheet', loc='macrosheets/sheet1.bin', id=0)...
  3. 0x17 0x8 0x0 0x43 0x0 0x41 0x0 0x4c 0x0 0x43 0x0 0x2e 0x0 0x45 0x0 0x58 0x0 0x45 0x0 0x19 0x40 0x0 0x1 0x1e 0x1 0x0 0x42 0x2 0x6e 0x0
  4. EXEC:0x2 0x6e 0x0
  5. EXEC( "CALC.EXE", 1)
  6.  
  7. 0x17 0x5 0x0 0x31 0x0 0x30 0x0 0x2a 0x0 0x33 0x0 0x30 0x0 0x19 0x40 0x0 0x1 0x1d 0x1 0x42 0x2 0x83 0x80
  8. SEND.KEYS:0x2 0x83 0x80
  9. SEND.KEYS( "10*30", TRUE)
  10.  
  11. 0x17 0x1 0x0 0x7e 0x0 0x19 0x40 0x0 0x1 0x1d 0x1 0x42 0x2 0x83 0x80
  12. SEND.KEYS:0x2 0x83 0x80
  13. SEND.KEYS( "~", TRUE)
  14.  
  15. 0x42 0x0 0x36 0x0
  16. HALT:0x0 0x36 0x0
  17. HALT()
  18.  
  19. 0x44 0x7e 0x10 0x0 0x0 0x2c 0xc0 0x44 0x96 0xd6 0x0 0x0 0x99 0xc0 0x3 0x41 0x6f 0x0 0x44 0xcf 0xe1 0x0 0x0 0x3e 0xc0 0x44 0xaa 0xb 0x0 0x0 0xcb 0xc0 0x6 0x41 0x6f 0x0 0x8 0x44 0x44 0xb2 0x0 0x0 0x2d 0xc0 0x44 0xb7 0xcc 0x0 0x0 0x97 0xc0 0x3 0x41 0x6f 0x0 0x8 0x44 0x8e 0x77 0x0 0x0 0xe3 0xc0 0x44 0x84 0xda 0x0 0x0 0x1b 0xc0 0x6 0x41 0x6f 0x0 0x8 0x24 0x9d 0xf6 0x0 0x0 0x68 0xc0 0x42 0x2 0x61 0x80
  20. CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 &: 0x8 &: 0x8 &: 0x8 FORMULA.FILL:0x2 0x61 0x80
  21. FORMULA.FILL(CHAR(AS4223+EX54935)&CHAR(BK57808/GV2987)&CHAR(AT45637+EV52408)&CHAR(HT30607/AB55941), DA63134)
  22.  
  23. 0x44 0x7e 0x10 0x0 0x0 0x2c 0xc0 0x44 0x96 0xd6 0x0 0x0 0x99 0xc0 0x3 0x41 0x6f 0x0 0x44 0xcf 0xe1 0x0 0x0 0x3e 0xc0 0x44 0xaa 0xb 0x0 0x0 0xcb 0xc0 0x6 0x41 0x6f 0x0 0x8 0x44 0x44 0xb2 0x0 0x0 0x2d 0xc0 0x44 0xb7 0xcc 0x0 0x0 0x97 0xc0 0x3 0x41 0x6f 0x0 0x8 0x44 0x8e 0x77 0x0 0x0 0xe3 0xc0 0x44 0x84 0xda 0x0 0x0 0x1b 0xc0 0x6 0x41 0x6f 0x0 0x8 0x24 0x9d 0xf6 0x0 0x0 0x68 0xc0 0x42 0x2 0x60 0x80
  24. CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 &: 0x8 &: 0x8 &: 0x8 FORMULA:0x2 0x60 0x80
  25. FORMULA(CHAR(AS4223+EX54935)&CHAR(BK57808/GV2987)&CHAR(AT45637+EV52408)&CHAR(HT30607/AB55941), DA63134)
  26.  
  27. 0x24 0x9d 0xf6 0x0 0x0 0x68 0xc0 0x44 0x7e 0x10 0x0 0x0 0x2c 0xc0 0x44 0x96 0xd6 0x0 0x0 0x99 0xc0 0x3 0x19 0x40 0x0 0x1 0x41 0x6f 0x0 0x44 0xcf 0xe1 0x0 0x0 0x3e 0xc0 0x44 0xaa 0xb 0x0 0x0 0xcb 0xc0 0x6 0x41 0x6f 0x0 0x8 0x44 0x44 0xb2 0x0 0x0 0x2d 0xc0 0x44 0xb7 0xcc 0x0 0x0 0x97 0xc0 0x3 0x41 0x6f 0x0 0x8 0x44 0x8e 0x77 0x0 0x0 0xe3 0xc0 0x44 0x84 0xda 0x0 0x0 0x1b 0xc0 0x6 0x41 0x6f 0x0 0x8 0x41 0x6c 0x0
  28. CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 CHAR:0x6f 0x0 &: 0x8 &: 0x8 &: 0x8 SET.VALUE:0x6c 0x0
  29. SET.VALUE(DA63134, CHAR( AS4223+EX54935)&CHAR(BK57808/GV2987)&CHAR(AT45637+EV52408)&CHAR(HT30607/AB55941))
  30.  
  31. 0x24 0x96 0x4f 0x0 0x0 0x58 0xc0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x1e 0x8 0x0 0x24 0x0 0x5b 0x0 0x0 0x2d 0xc0 0x42 0x2 0xb9 0x0 0x1e 0xa 0x0 0x5 0x4 0x41 0x6c 0x0
  32. GET.CELL:0x2 0xb9 0x0 SET.VALUE:0x6c 0x0
  33. SET.VALUE(CK20375, -469.0-GET.CELL(8, AT23297)*10)
  34.  
  35. 0x44 0x96 0x4f 0x0 0x0 0x58 0xc0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x1e 0x8 0x0 0x24 0x0 0x5b 0x0 0x0 0x2d 0xc0 0x42 0x2 0xb9 0x0 0x1e 0xa 0x0 0x5 0x4 0x42 0x2 0x60 0x80
  36. GET.CELL:0x2 0xb9 0x0 FORMULA:0x2 0x60 0x80
  37. FORMULA(CK20375, -469.0-GET.CELL(8, AT23297)*10)
  38.  
  39. 0x44 0x96 0x4f 0x0 0x0 0x58 0xc0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x1e 0x8 0x0 0x24 0x0 0x5b 0x0 0x0 0x2d 0xc0 0x42 0x2 0xb9 0x0 0x1e 0xa 0x0 0x5 0x4 0x42 0x2 0x61 0x80
  40. GET.CELL:0x2 0xb9 0x0 FORMULA.FILL:0x2 0x61 0x80
  41. FORMULA.FILL(CK20375, -469.0-GET.CELL(8, AT23297)*10)
  42.  
  43. 0x19 0x1 0x0 0x0 0x24 0x96 0x4f 0x0 0x0 0x58 0xc0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x41 0x4a 0x0 0x41 0x43 0x0 0x1e 0xa 0x0 0x5 0x4 0x41 0x6c 0x0
  44. NOW:0x4a 0x0 DAY:0x43 0x0 SET.VALUE:0x6c 0x0
  45. SET.VALUE(CK20375, -469.0-DAY(NOW())*10)
  46.  
  47. 0x19 0x1 0x0 0x0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x41 0x4a 0x0 0x41 0x43 0x0 0x1e 0xa 0x0 0x5 0x4 0x19 0x40 0x0 0x1 0x24 0x96 0x4f 0x0 0x0 0x58 0xc0 0x42 0x2 0x60 0x80
  48. NOW:0x4a 0x0 DAY:0x43 0x0 FORMULA:0x2 0x60 0x80
  49. FORMULA( -469.0-DAY(NOW())*10, CK20375)
  50.  
  51. 0x19 0x1 0x0 0x0 0x1f 0x0 0x0 0x0 0x0 0x0 0x50 0x7d 0xc0 0x41 0x4a 0x0 0x41 0x43 0x0 0x1e 0xa 0x0 0x5 0x4 0x19 0x40 0x0 0x1 0x24 0x96 0x4f 0x0 0x0 0x58 0xc0 0x42 0x2 0x61 0x80
  52. NOW:0x4a 0x0 DAY:0x43 0x0 FORMULA.FILL:0x2 0x61 0x80
  53. FORMULA.FILL( -469.0-DAY(NOW())*10, CK20375)
  54.  
  55. 0x24 0xc2 0x7f 0x0 0x0 0x25 0xc0 0x41 0x35 0x0
  56. GOTO:0x35 0x0
  57. GOTO(AL32707)
  58.  
  59. 0x24 0xb0 0xd0 0x0 0x0 0x2d 0xc0 0x42 0x1 0x11 0x80
  60. RUN:0x1 0x11 0x80
  61. RUN(AT53425)
  62.  
  63. 0x42 0x0 0x36 0x0
  64. HALT:0x0 0x36 0x0
  65. HALT()
  66.  
  67. Done! (0.010992765426635742 seconds)
  68. Reading sheet SheetRecord(state=<SheetState.VISIBLE: 0>, sheetId=1, rId='rId2', name='Sheet1', type='worksheet', loc='worksheets/sheet1.bin', id=1)...
  69. Done! (0.0010023117065429688 seconds)
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!