Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Analyzing Office Maldocs With Decoder.xls SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Analyzing Office Maldocs With Decoder.xls

In my last diary entry, I show how to decode VBA maldoc strings with Excel. A similar technique can be used to decode a payload (like shellcode).

I explain this method in this video.

Didier Stevens
Microsoft MVP Consumer Security
blog.DidierStevens.com DidierStevensLabs.com

DidierStevens

457 Posts
ISC Handler
Oct 16th 2016

Sign Up for Free or Log In to start participating in the conversation!