ISC Diary entry: Another example of maldoc string obfuscation, with extra bonus: UAC bypass
Tools: oledump.py, re-search.py and sets.py.
Sample: 7dff363557f711a92216da9e9af3bb1f
- Comment
-
Subscribe
Subscribed
Have a WordPress.com account? Log in now.
One thought on “Maldoc Deobfuscation: Character Removal”