DissectMalware / XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
Apache License 2.0
568 stars 115 forks source link

Latest Macro breaks decoding #53

Closed enzok closed 4 years ago

enzok commented 4 years ago

MD5: 32be081e75cc5beb0ffbf7189325444e (can be D/L from VirusTotal)

This latest sample is no longer decoded.

DissectMalware commented 4 years ago

This bug is fixed in https://github.com/DissectMalware/XLMMacroDeobfuscator/tree/version-2.0

pastebin output: https://pastebin.com/xEcvfZPS