ISC Diary entry: Sleeping VBS Really Wants To Sleep
Tools: oledump.py
Sample: 7EAB96D2BC04CA155DE035815B88EE00
Author: Didier Stevens
Hancitor Maldoc: Shellcode Dynamic Analysis
Hancitor maldoc: Extracting URLs
EMET vs Hancitor Maldoc
Sample: b107f3235057bb2b06283030be8f26e4
VBA Shellcode To Test EMET
Tools: shellcode2vba.py, shellcode
Maldoc VBA: Decoding With Excel
Tools: oledump.py, re-search.py
ISC Diary: Maldoc VBA Anti-Analysis
Sample: 7c9505f2c041ba588bed854258344c43
Maldoc VBA: Shellcode
Sample: 2f918f49c3f926bb1538eaad6e8e6883
Maldoc VBA: decoder.xls
Maldoc VBA: .pub File
Malware: FakeNet-NG
Tool: FakeNet-NG
Didier Stevens Videos 