-
Notifications
You must be signed in to change notification settings - Fork 560
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
XLS with Macro not detected #753
Comments
This is similar but seems to be a different type:
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Affected tool:
olevba, mraptor, oleid
Describe the bug
Oletools do not detect the existence of the macro inside these xls.
File/Malware sample to reproduce the bug
Link: https://labs.inquest.net/dfi/sha256/c3d288a9284810a199d41d9bed7d3bfe3daf478b2a5bbd7a96f20876997c429a
How To Reproduce the bug
Reproducible in Py2/Py3
Expected behavior
All Oletools will detect the malware (Please observe the link)
Console output / Screenshots
If applicable, add screenshots to help explain your problem.
Use the option "-l debug" to add debugging information, if possible.
You can see from the debug that the macro is found but not shown:
Regular run:
But from OleVBA debug:
Version information:
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: