Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: Analyzing Office Maldocs With Decoder.xls SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Analyzing Office Maldocs With Decoder.xls

In my last diary entry, I show how to decode VBA maldoc strings with Excel. A similar technique can be used to decode a payload (like shellcode).

I explain this method in this video.

Didier Stevens
Microsoft MVP Consumer Security
blog.DidierStevens.com DidierStevensLabs.com

DidierStevens

398 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!