oletools icon indicating copy to clipboard operation
oletools copied to clipboard

mraptor 0.56.2 can't find the Macro

Open amoy9812 opened this issue 2 years ago • 0 comments

Affected tool: mraptor

Describe the bug mraptor 0.56.2 can' find the Macro mraptor 0.56dev5 can find the Macro

File/Malware sample to reproduce the bug Please attach the file in a password protected zip archive, or provide a link where it can be downloaded (e.g. Hybrid Analysis, preferably not VirusTotal which requires paid access). If not possible, please provide a hash.

How To Reproduce the bug Steps to reproduce the behavior, including the full command line or the options you used.

Expected behavior A clear and concise description of what you expected to happen.

Console output / Screenshots If applicable, add screenshots to help explain your problem. Use the option "-l debug" to add debugging information, if possible.

Version information:

  • OS: Linux
  • OS version: Centos 7.9 64 bits
  • Python version: 3.8 - 32/64 bits
  • oletools version: 0.60.1

Additional context MacroRaptor 0.56.2 - http://decalage.info/python/oletools This is work in progress, please report issues at https://github.com/decalage2/oletools/issues ----------+-----+----+-------------------------------------------------------- Result |Flags|Type|File
----------+-----+----+-------------------------------------------------------- No Macro | |OLE:|/tmp/virus/INV.xls

Flags: A=AutoExec, W=Write, X=Execute Exit code: 0 - No Macro

MacroRaptor 0.56dev5 - http://decalage.info/python/oletools This is work in progress, please report issues at https://github.com/decalage2/oletools/issues ----------+-----+----+-------------------------------------------------------- Result |Flags|Type|File
----------+-----+----+-------------------------------------------------------- Macro OK |A-- |OLE:|/tmp/INV.xls

Flags: A=AutoExec, W=Write, X=Execute Exit code: 2 - Macro OK

inv 12-05-2022_1319.xls

amoy9812 avatar May 13 '22 02:05 amoy9812