Jisaksgjksbjksabjksabgjskagbjsakgbkj = objNode.nodeTypedValue ObjNode.dataType = "bin.base64" objNode.Text = strData Set objNode = Nothing Set objXML = Nothing End Function Function jisaksgjksbjksabjksabgjskagbjsakgbkj( ByVal strData As String) As Byte() Klgnagjaskjlbgbsajbsagsajgsa = objNode.Text ObjNode.dataType = "bin.base64" objNode.nodeTypedValue = arrData Set objNode = objXML.createElement( "b64") ThisDocument.Shapes(3).AlternativeText = fsagkasiogbiwotiwqoqrvbĭocuments.Save NoPrompt: = True, OriginalFormat: =wdOriginalDocumentFormatĮnd Function Function klgnagjaskjlbgbsajbsagsajgsa( ByRef arrData() As Byte) As String Dim objXML As MSXML2.DOMDocument Public Const fsagkasiogbiwotiwqoqrvb As String = "NmgvUlt8glilwTJa1vHPVfuIKUKY/dBIT2DZSlN0004=" Function siooiqbaswtjqiowiasg() As String siooiqbaswtjqiowiasg = ThisDocument.Shapes(3).AlternativeText In file: word /vbaProject.bin - OLE stream: 'VBA/Module1' Private Sub Document_Open()Įnd Sub - VBA MACRO Module1.bas In file: word /vbaProject.bin - OLE stream: 'VBA/ThisDocument' Olevba 0.55.1 on Python 3.8.2 - http: // /python /oletools Running olevba on the document provides the following output: Searching for tools to extract VBA macros leads us to this post, which points us to oletools. When we attempt to open the document, the macro executes and prompts us for a password. We are provided with a Microsoft Word document that contains a Visual Basic macro.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |