View Single Post
  #1  
Old 08-31-2018, 15:37
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 786
Rept. Given: 389
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 806
Thanks Rcvd at 1,800 Times in 478 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Vba2Graph - Generate call graphs from VBA code for easier analysis

Vba2Graph:

Quote:

A tool for security researchers, who waste their time analyzing malicious Office macros.
Generates a VBA call graph, with potential malicious keywords highlighted.
Allows for quick analysis of malicous macros, and easy understanding of the execution flow.


Features
  • Keyword highlighting
  • VBA Properties support
  • External function declarion support
  • Tricky macros with "_Change" execution triggers
  • Fancy color schemes!

Pros:

✓ Pretty fast

✓ Works well on most malicious macros observed in the wild

Cons:

✗ Static (dynamicaly resolved calls would not be recognized)

FULL SOURCE CODE:
Quote:
https://github.com/MalwareCantFly/Vba2Graph
Reply With Quote
The Following 5 Users Say Thank You to TechLord For This Useful Post:
Mandriva (09-01-2018), Megin (09-03-2018), Ragnarok (08-31-2018), tonyweb (10-20-2018)