https://github.com/cybercentrecanada/assemblyline-service-xlmmacrodeobfuscator

Assemblyline 4 XLM macro deobfuscator service
https://github.com/cybercentrecanada/assemblyline-service-xlmmacrodeobfuscator

assemblyline excel macros malware-analysis vba

Last synced: 2 months ago
JSON representation

Assemblyline 4 XLM macro deobfuscator service

• Host: GitHub
• URL: https://github.com/cybercentrecanada/assemblyline-service-xlmmacrodeobfuscator
• Owner: CybercentreCanada
• License: mit
• Created: 2020-08-21T18:19:57.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2024-09-13T14:02:54.000Z (4 months ago)
• Last Synced: 2024-09-14T04:43:54.291Z (4 months ago)
• Topics: assemblyline, excel, macros, malware-analysis, vba
• Language: Python
• Homepage: https://cybercentrecanada.github.io/assemblyline4_docs/
• Size: 310 KB
• Stars: 4
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE.md

Awesome Lists containing this project

README

        
# assemblyline-service-XLMMacroDeobfuscator

Decode obfuscated XLM macros (also known as Excel 4.0 macros). 

This service wrap the excellent tool XLMMacroDeobfuscator published by DissectMalware [here](https://github.com/DissectMalware/XLMMacroDeobfuscator) which utilizes an internal XLM emulator to interpret the macros, without fully performing the code.

Original license for the library can be found here: https://github.com/DissectMalware/XLMMacroDeobfuscator/blob/master/LICENSE

Thank you @DissectMalware for releasing this tool!