Sample: b107f3235057bb2b06283030be8f26e4
Tools: jmp2it, Immunity Debugger
video
Hancitor maldoc: Extracting URLs
EMET vs Hancitor Maldoc
Sample: b107f3235057bb2b06283030be8f26e4
Maldoc VBA: Decoding With Excel
Tools: oledump.py, re-search.py
ISC Diary: Maldoc VBA Anti-Analysis
Sample: 7c9505f2c041ba588bed854258344c43
Maldoc VBA: Shellcode
Sample: 2f918f49c3f926bb1538eaad6e8e6883
Maldoc VBA: decoder.xls
Maldoc VBA: .pub File
Malware: FakeNet-NG
Tool: FakeNet-NG
Malware: Process Explorer & Procmon
Tools: Process Explorer, Process Monitor
Didier Stevens Videos 