Skip to content

biff_plugin: bytearray index out of range #564

@LeMurphant

Description

@LeMurphant

Affected tool:
olevba

Describe the bug
Crash when analysing malicious file
excel_4_malware.zip
pw: ZSinfected

Console output / Screenshots

Type: OLE
ERROR    Error when running oledump.plugin_biff, please report to https://github.com/decalage2/oletools/issues
Traceback (most recent call last):
  File "olevba.py", line 3243, in detect_xlm_macros
    self.xlm_macros = biff_plugin.Analyze()
  File "/home/ocoutu/Programs/oletools/oletools/thirdparty/oledump/plugin_biff.py", line 1057, in Analyze
    line += ' - R%dC%d len=%d %s' % (row + 1, column + 1, length, ParseExpression(expression))
  File "/home/ocoutu/Programs/oletools/oletools/thirdparty/oledump/plugin_biff.py", line 971, in ParseExpression
    expression = expression[expression[0] + expression[1] * 0x100:]
IndexError: bytearray index out of range
No VBA macros found.

Version information:

  • OS:Linux
  • OS version: Ubuntu 19.10 64 bits
  • Python version: 3.7.5
  • oletools version: 93688d9

Metadata

Metadata

Assignees

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions