Skip to content

rtfobj: warning when the {\rtf1 header signature is incompleteΒ #385

@decalage2

Description

@decalage2

This is most of the time (but not always) the sign of a malicious RTF trying to evade detection.

Inspiration: https://twitter.com/cyb3rops/status/1087027985289543681

Metadata

Metadata

Assignees

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions