metac0rtex

Windows 7 32 bit. Its being dropped in %TEMP% so no its not subject to UAC (I've dropped binaries there before without issue). Its a custom payload

Nope. They payload shouldn't matter and like I said, the same payload executes fine before being pushed into exeinvba.py. The same bytes in should result in the same bytes out,...

I was using Word but just tried it in Excel and same issue. What version of Office are you testing on? This is Professional Plus 2010 here

Built a new binary in the interest of not leaking the original https://gist.github.com/metac0rtex/ff38d146fcd7796272c5528d62a4e7af

My bad, I didn't clean it up as well as I should have :-/ Just did tons of testing. So, I am not using Environ() and defining it manually and...

Still confused why I cant get it to auto drop without manually running it. Are you doing anything different than copying the VB from the script, pasting it into the...

Sorry, I didn't post the full code like I should have.

Full log here: http://tny.cz/3bfc45f2

I did follow the steps in the README. I am able to get it to compile and see it working on 1.8.10 but not so much on 1.10.2