-
Notifications
You must be signed in to change notification settings - Fork 589
Open
Description
Affected tool:
olevba
Describe the bug
Crash when analysing malicious file
excel_4_malware.zip
pw: ZSinfected
Console output / Screenshots
Type: OLE
ERROR Error when running oledump.plugin_biff, please report to https://github.com/decalage2/oletools/issues
Traceback (most recent call last):
File "olevba.py", line 3243, in detect_xlm_macros
self.xlm_macros = biff_plugin.Analyze()
File "/home/ocoutu/Programs/oletools/oletools/thirdparty/oledump/plugin_biff.py", line 1057, in Analyze
line += ' - R%dC%d len=%d %s' % (row + 1, column + 1, length, ParseExpression(expression))
File "/home/ocoutu/Programs/oletools/oletools/thirdparty/oledump/plugin_biff.py", line 971, in ParseExpression
expression = expression[expression[0] + expression[1] * 0x100:]
IndexError: bytearray index out of range
No VBA macros found.
Version information:
- OS:Linux
- OS version: Ubuntu 19.10 64 bits
- Python version: 3.7.5
- oletools version: 93688d9