https://www.securitynewspaper.com/2016/03/05/macro-malware-dridex-locky-using-forms-hide-code/
Macro Malware Dridex, Locky Using Forms to Hide Code