Skip to content

olevba+mraptor: Detect VBA stomping #404

@decalage2

Description

@decalage2

using pcodedmp and comparing with VBA source code.

adb may be used to generate test samples: https://github.com/haroldogden/adb

Also EvilClippy: https://github.com/outflanknl/EvilClippy

Display the version bytes in the _VBA_PROJECT stream [MS-OVBA 2.3.4.1] to see which Office version is targeted.

Metadata

Metadata

Assignees

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions