-
-
Notifications
You must be signed in to change notification settings - Fork 115
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Error [deobfuscator.py:2990 process_file(**vars(args))]: #78
Labels
bug
Something isn't working
Comments
Fixed an issue in xlrd2 project (DissectMalware/xlrd2@91bcd84) Please update xlrd2:
The output seems to be incomplete. The inner if block in z6 formula caused the interpreter loop detection logic to mark it as a loop; thus, halting the interpretation using -x (to extract raw formula) |
thanks this also fixed error for me, upgrading the xlrd2 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
❯
When analyzing a malicious document with version 0.1.7, analysis proceeds until...
xlmdeobfuscator.exe -f D:\malware\white\ecaaab9e2fc089eefb6accae9750ac60.bin
|\ /|( \ ( )
( \ / )| ( | () () |
\ () / | | | || || |
) _ ( | | | |()| |
/ ( ) \ | | | | | |
( / \ )| (/| ) ( |
|/ |(___/|/ |
( __ \ ( ____ ( ___ )( ___ \ ( ____ |\ /|( ____ ( ____ ( ___ )__ /( ___ )( ____ )
| ( \ )| ( /| ( ) || ( ) )| ( /| ) ( || ( /| ( /| ( ) | ) ( | ( ) || ( )|
| | ) || ( | | | || (/ / | ( | | | || (_____ | | | () | | | | | | || ()|
| | | || ) | | | || __ ( | ) | | | |(_ )| | | ___ | | | | | | || )
| | ) || ( | | | || ( \ \ | ( | | | | ) || | | ( ) | | | | | | || (\ (
| (/ )| (/| () || )) )| ) | () |/_) || (/| ) ( | | | | () || ) \ _
(/ (/()|/ ___/ |/ ()_)(/|/ | )( (____)|/ _/
XLMMacroDeobfuscator(v0.1.7) - https://github.com/DissectMalware/XLMMacroDeobfuscator
File: D:\malware\ecaaab9e2fc089eefb6accae9750ac60.bin
Unencrypted xls file
[Loading Cells]
Error [deobfuscator.py:2990 process_file(**vars(args))]:
========
MD5: ecaaab9e2fc089eefb6accae9750ac60
The text was updated successfully, but these errors were encountered: