vba-obfuscator icon indicating copy to clipboard operation
vba-obfuscator copied to clipboard

Error in Excel

Open moaeddy opened this issue 5 years ago • 1 comments

am using this in excel, below is first part output from obfuscated code

ActiveDocument.Variables.Add Name:="sOfVVIvQHHmfvBEH", Value:="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" & _ "800=" [INFO] Line 'ActiveDocument.Variables.Add N[...]' is too long. [INFO] Line 'msg = CyFCvAUyaVda(Array(42,(6[...]' is too long. [INFO] Line 'MsgBox CyFCvAUyaVda(Array((126[...]' is too long. [INFO] Line 'dIaKfhFrel = CyFCvAUyaVda(Arra[...]' is too long. [INFO] Obfuscated the code. "Use this line to add the document variable to you file and then remove these comments." ActiveDocument.Variables.Add Name:="sOfVVIvQHHmfvBEH", _ Value:="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" & _ "800=" Private OlWUjNNZgFSAom As Boolean Private xMfKjURjRfrqcn(0 To 63) As Byte Private PILmslLCsSxLMU((0 Xor 0) To 127) As Byte Private Sub gNeoJaemOaF()

When insert this line and do as the video instructed

ActiveDocument.Variables.Add Name:="sOfVVIvQHHmfvBEH", Value:="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" & _ "800="

i got error

Screenshot_1

any idea how to have this fix?

moaeddy avatar Jun 26 '19 12:06 moaeddy

That variable name is used inside the obfuscated code. You should just replace the value. Seems like the variable is stored inside ActiveDocument.Variables list. So instead of creating this variable and reading it again to get the stored value. Use the value directly. I had the same issue but got it working by using it directly. ActiveDocument is WORD specific. Another option is to use ActiveSheet.Comments to get around that, I think. @bonnetn What do you think ? What's the point on using ActiveDocument.Variables ? And What's the purpose of this variable ?

PS: Lovely tool! Thanks a lot :D

HarishHary avatar Aug 23 '19 10:08 HarishHary