Issue - 'XLSMWrapper' object has no attribute 'get_workbook_name'
nikitah4x opened this issue · 3 comments
Hey,
I'm running the XLM Deobfuscator on a xlsm file, and I've this issue
[Loading Cells]
auto_open: auto_open->Macro1!$A$1
auto_close: auto_close1->Macro1!$W$474
[Starting Deobfuscation]
CELL:A39 , FullEvaluation , GOTO(B3)
Error [deobfuscator.py:2562 evaluation_result = self.evaluate_parse_tree(current_cell, parse_tree, interactive)]: 'XLSMWrapper' object has no attribute 'get_workbook_name'
CELL:W484 , FullEvaluation , FORMULA("=EXEC(""rundll32.exe C:/Users/Public/Microsoft.dll,Exec"")",W573)
CELL:W573 , PartialEvaluation , =EXEC("rundll32.exe C:/Users/Public/Microsoft.dll,Exec")
CELL:W574 , FullEvaluation , FORMULA("Done",W573)
Files:
[END of Deobfuscation]
time elapsed: 0.1580219268798828
Can someone elaborate on this issue?
I need to examine the file.
Can you share the SHA256 of the file if it is on VirusTotal? If it is not there, can you upload it somewhere and share? You can send me a direct message on Twitter (https://twitter.com/DissectMalware)
@DissectMalware I sent you a message on Twitter.
The problem was that get_workbook_name function was not implemented in XLSMWrapper and XLSBWrapper.
Fixed in 45d1cf4