decalage2 / ViperMonkey

A VBA parser and emulation engine to analyze malicious macros.
1.05k stars 186 forks source link

vmonkey: replace call to python-magic by simple test #73

Open decalage2 opened 5 years ago

decalage2 commented 5 years ago

python-magic requires libmagic, so it's not easy to install on Windows with pip. vmonkey can use a simple test instead, e.g. zipfile.is_zipfile and olefile.isOleFile.