DissectMalware / XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
Apache License 2.0
568 stars 115 forks source link

Bug fixes and extensions of existing methods #65

Closed stevengoossensB closed 3 years ago

stevengoossensB commented 3 years ago
DissectMalware commented 3 years ago

The code does not work correctly after this commit https://github.com/DissectMalware/XLMMacroDeobfuscator/pull/65/commits/b7a22c863c6b37db2c82809f60777e63bda87632

Example: 6f6ba7e59949cd4869f4cd3d63d556b86313b7e42d2030546426efbef20ee2c1

The output after this commit is

image

Instead of https://pastebin.com/cZ5kKQLn

image

The code is already merged with master.