Tools: oledump.py, re-research.py, sets.py and numbers-to-string.py.

ISC diary entry: Dealing with numeric obfuscation in malicious scripts

Sample: a564cd735132eccde401d6978651b66d

Tools: oledump.py.

ISC diary entry: Maldoc analysis with standard Linux tools

Sample: 2f87105fea2d4bae72ebc00efc6ede56

Tools: oledump.py, re-research.py, sets.py and numbers-to-string.py.

ISC diary entry: Dealing with numeric obfuscation in malicious scripts

Sample: f25a16298240f2faefee654478050a62

Tools: oledump.py, re-research.py, sets.py and instantiation.py.

ISC diary entry: Malicious Word documents using DOSfuscation

Sample: 47827f618056ef15563138ebe69225d0

Tools: zipdump.py and re-search.py.

ISC Diary Entry: XPS Samples

Sample: 19e432b6960604aa7492e1196c20b594

Tools: oledump.py

Sample: 1b0fbd5e0af361058a8115b941232e34

Tools: oledump.py

Twitter: @JohnLaTwC

Sample: 1bf30ae0d9fb2b9fcf16575e40f26110

Tools: rtfdump.py

ISC Diary entry: Dealing with obfuscated RTF files

Sample: a3d89108e4a13900c299d7c5f6d687e0

 

Tools: pdfid.py, pdf-parser.py

Sample: 58ddf75566260679506fdaf4da2adda5

Tools: oledump.py, base64dump.py

Sample: 9c4c3234f20b6102569216675b48c70a

ISC Diary Entry: It’s Not An Invoice …