Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Analyzing Office Maldocs With Decoder.xls - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Analyzing Office Maldocs With Decoder.xls

In my last diary entry, I show how to decode VBA maldoc strings with Excel. A similar technique can be used to decode a payload (like shellcode).

I explain this method in this video.

Didier Stevens
Microsoft MVP Consumer Security


638 Posts
ISC Handler
Oct 16th 2016

Sign Up for Free or Log In to start participating in the conversation!