Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Analyzing Office Maldocs With Decoder.xls SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Analyzing Office Maldocs With Decoder.xls

In my last diary entry, I show how to decode VBA maldoc strings with Excel. A similar technique can be used to decode a payload (like shellcode).

I explain this method in this video.

Didier Stevens
Microsoft MVP Consumer Security


429 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!