Analyzing infected files
MSOFFICE 2007+ unzip the file and get vbaProject.bin sigtool –vba vbaProject.bin PRE MSOFFICE 2007 sigtool –vba FILE.xls EXECUTABLES get http://hexacorn.com/d/PESectionExtractor.pl use it.. sigtool –mdb OR sigtool –md5
MSOFFICE 2007+ unzip the file and get vbaProject.bin sigtool –vba vbaProject.bin PRE MSOFFICE 2007 sigtool –vba FILE.xls EXECUTABLES get http://hexacorn.com/d/PESectionExtractor.pl use it.. sigtool –mdb OR sigtool –md5