DissectMalware/XLMMacroDeobfuscator

Issues

• Old version/repository of lark used

  #118 opened 7 months ago by xambroz
  0

• [Loading Cells] Error [deobfuscator.py:3195 process_file(**vars(args))]:

  #116 opened 2 years ago by diyarbagis
  7

• [Loading Cells] Error [deobfuscator.py:3195 process_file(**vars(args))]:

  #117 opened 2 years ago by Hellfire0x01
  4

• New release?

  #115 opened 2 years ago by Rafiot
  6

• Regression in recent commit causes crash

  #112 opened 2 years ago by jhhcs
  3

• Error: Unexpected token Token('__ANON_0', ':"&"//")&"su")&"bb")& ...')

  #111 opened 2 years ago by cccs-jh
  1

• Parsing of short sheet names

  #103 opened 3 years ago by unconfigured
  1

• Unexpected Token

  #108 opened 3 years ago by jhhcs
  8

• Error: Unexpected token

  #106 opened 3 years ago by decalage2
  2

• Unexpected Token Error

  #107 opened 3 years ago by baderj
  2

• Unicode error

  #105 opened 3 years ago by decalage2
  1

• Missing calls to RANDBETWEEN

  #104 opened 3 years ago by seanthegeek
  0

• Fails on recent Emotet maldocs.

  #102 opened 3 years ago by kirk-sayre-work
  4

• Handling of dependencies

  #100 opened 3 years ago by tbeadle
  2

• Unexpected token Token('__ANON_0'

  #101 opened 3 years ago by seanthegeek
  3

• Bug in handling FORMULA.ARRAY formula

  #99 opened 3 years ago by DissectMalware
  1

• Error during parse(formula): Unexpected token Token('STRING', '"&"')

  #98 opened 3 years ago by hnsrck
  1

• [Dridex] Issue in extracting files

  #97 opened 3 years ago by DissectMalware
  0

• Issue - 'XLSMWrapper' object has no attribute 'get_workbook_name'

  #96 opened 3 years ago by nikitah4x
  3

• Extracting empty cells

  #95 opened 3 years ago by DissectMalware
  0

• Problem handling a defined name to a value in XLSM

  #94 opened 3 years ago by DissectMalware
  1

• Error processing XLSB

  #91 opened 3 years ago by DissectMalware
  1

• Error [deobfuscator.py:2990 process_file(**vars(args))]:

  #78 opened 4 years ago by JA1E0
  2

• 'bool' object has no attribute 'strip'

  #88 opened 3 years ago by FafnerKeyZee
  2

• Error - Cannot handle numbers in scientific notation

  #86 opened 3 years ago by DissectMalware
  0

• entry point not found on Trickbot/EtterSilent sample

  #84 opened 3 years ago by decalage2
  1

• Cfdi

  #82 opened 3 years ago by Dany181286
  2

• Error: int() argument must be a string, a bytes-like object or a number, not 'NoneType'

  #85 opened 3 years ago by decalage2
  0

• Error: Unexpected token('CMPOP', ='=)

  #80 opened 4 years ago by coaleiii
  5

• Error [deobfuscator.py:2433....

  #77 opened 4 years ago by JA1E0
  1

• unsupported operand type(s) for +: 'Boundsheet' and 'str'

  #75 opened 4 years ago by Beercow
  1

• Unexpected token Token('CMPOP', '=')

  #73 opened 4 years ago by Beercow
  6

• xls_workbook.name_map does not contain static values

  #66 opened 4 years ago by stevengoossensB
  1

• Pending Transaction for11 Days now

  #70 opened 4 years ago by Dianaxrp
  3

• Add functionality to manually load files and set environment variables during execution

  #69 opened 4 years ago by stevengoossensB
  0

• Assignment operator not supported and wrong XLSB formula parsing

  #64 opened 4 years ago by margaretbloom
  1

• Error: 'XLMInterpreter' object has no attribute 'parse_cell_address'

  #62 opened 4 years ago by rsaccani
  1

• Unexpected token '__ANON_0'

  #61 opened 4 years ago by enzok
  0

• failure to parse formula in xlsb file

  #60 opened 4 years ago by enzok
  4

• Bug: Unexpected token Token(__ANON_0, '())')

  #52 opened 4 years ago by malware-kitten
  2

• Idea - Summary

  #57 opened 4 years ago by 0ssigeno
  3

• Object of type 'Tree' is not JSON serializable

  #56 opened 4 years ago by 0ssigeno
  2

• Latest Macro breaks decoding

  #53 opened 4 years ago by enzok
  1

• Error: Unexpected token

  #55 opened 4 years ago by johnmccash
  1

• Bug: 'Token' object has no attribute 'data'

  #51 opened 4 years ago by malware-kitten
  3

• Import of win32comext.axscript.server.error breaks xlmdeobfuscator under Linux.

  #50 opened 4 years ago by kirk-sayre-work
  2

• can only concatenate str (not "int") to str

  #46 opened 4 years ago by jcarndt
  2

• Named function invocations can break deobfuscation

  #40 opened 5 years ago by michaelweber
  9

• Support for password protected documents

  #41 opened 5 years ago by Maijin
  6

• Two buggy samples

  #33 opened 5 years ago by Maijin
  11