DissectMalware / XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
Apache License 2.0
570 stars 115 forks source link

Error processing XLSB #91

Closed DissectMalware closed 3 years ago

DissectMalware commented 3 years ago

Sample: https://www.virustotal.com/gui/file/0ff427596f6dd368c22a36acbe5add4f97ffe792f9c6a9ef2ab44dd4a25979ce

CELL:A19 , =FOR.CELL("CurrentCell", F167:F11914, TRUE), False CELL:A30 , =FWRITE(A15, CHAR(CurrentCell)), #ERR!29

FOR.CELL logic must be implemented

image

DissectMalware commented 3 years ago

Fixed in #93