Tag Archives: VBA
Peeling away the layers of obfuscation from Excel VBA to dll
When I first seen this Tweet here by FileScan.IO @filescan_itsec I thought this would be a easy target for deobfuscation. I was wrong. The layers just kept peeling away. Looking at the Twitter link you can get a pretty good … Continue reading
Extracting Shellcode from VBA to PowerShell
This post will revolve around using my tools to extract the vba code then clean a base64 string that is exploded into multiple lines and then decode to a PowerShell script then extract the shellcode from the script and get … Continue reading
Posted in Malware, PowerShell, VBScript
Tagged Decoding, Malware Analysis, PowerShell, VBA
1 Comment
A look at Stomped VBA code and the P-Code in a Word Document
This sample comes from a Twitter discussion here and a second part of the thread here on April 22 2019. This discussion was started by “My Online Security @dvk01uk “. Although it appears to have a vba file in it … Continue reading
Posted in Malware
Tagged Malware Analysis, P-Code, VBA
Comments Off on A look at Stomped VBA code and the P-Code in a Word Document
PC's Xcetra Support 