michaelweber / Macrome

Excel Macro Document Reader/Writer for Red Teamers & Analysts
MIT License
514 stars 78 forks source link

XOR Obfuscated Documents cannot have normal Images #18

Open michaelweber opened 3 years ago

michaelweber commented 3 years ago

I have no idea why this happens, but if you use the --password flag, your decoy document can't have a normal embedded image. To get around this my example uses a tiled background, but that's not something you're going to use in a common phishing lure.