08-31-2018, 15:37
|
Banned User
|
|
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 761
Rept. Given: 384
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 789
Thanks Rcvd at 2,022 Times in 571 Posts
|
|
Vba2Graph - Generate call graphs from VBA code for easier analysis
Vba2Graph:
Quote:
A tool for security researchers, who waste their time analyzing malicious Office macros.
Generates a VBA call graph, with potential malicious keywords highlighted.
Allows for quick analysis of malicous macros, and easy understanding of the execution flow.
Features
- Keyword highlighting
- VBA Properties support
- External function declarion support
- Tricky macros with "_Change" execution triggers
- Fancy color schemes!
Pros:
✓ Pretty fast
✓ Works well on most malicious macros observed in the wild
Cons:
✗ Static (dynamicaly resolved calls would not be recognized)
|
FULL SOURCE CODE:
Quote:
https://github.com/MalwareCantFly/Vba2Graph
|
|