Josh StroscheinFeb 272 min readIdentifying UserForms with Oledump and OlevbaMalware authors often find creative ways to obfuscate and store their data and malicious office documents are no exception. One such...
Josh StroscheinApr 9, 20202 min readRemoving Passwords from VBA ProjectsOccasionally I’ll encounter a maldoc that has a password-protected VBA project. While tools such as oledump may still extract the macros,...