Video: Maldoc Cleaned by Anti-Virus, (Sun, Mar 27th)

In this video I made for diary entry “Maldoc Cleaned by Anti-Virus“, I follow a slightly different proecudre than shown in the diary entry itself:

  1. I use a new version of oledump (0.0.64), with a new option (-u) for this kind of situations
  2. I use a 010 Editor template for ole files


Didier Stevens
Senior handler
Microsoft MVP

(c) SANS Internet Storm Center. Creative Commons Attribution-Noncommercial 3.0 United States License.

Reposted from SANS. View original.