I recorded a video where I explain how to use my oledump plugin plugin_vba_dco.py to analyzed the sample of diary entry “Maldoc: non-ASCII VBA Identifiers“.
Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
