top of page


Josh Stroschein
Feb 27, 20242 min read
Identifying UserForms with Oledump and Olevba
Malware authors often find creative ways to obfuscate and store their data and malicious office documents are no exception. One such...
495 views

Josh Stroschein
Apr 9, 20202 min read
Removing Passwords from VBA Projects
Occasionally I’ll encounter a maldoc that has a password-protected VBA project. While tools such as oledump may still extract the macros,...
22 views
bottom of page