.DOC macro deobfuscation

  • Status: Closed
  • Prize: $20
  • Entries Received: 2
  • Winner: sumeet00

Contest Brief

I need someone who can reverse a malicious .DOC macro in order for me to understand the code. The code is in VBA , ­~600 lines.

Recommended Skills

Public Clarification Board

  • bkvenn34
    Contest Holder
    • 10 years ago

    Here is the file : http://s000.tinyupload.com/index.php?file_id=10675996017329430339

    • 10 years ago
  • alviolette
    alviolette
    • 10 years ago

    Can you provide the entire 600 lines of code? Your image doesn't tell all ... but it tells me enough ... there are system level calls being made as well as some calls to a malicious .dll that may have been downloaded during some unprotected web session. All of the visible variables that are been created in this macro are cryptically named or very ambiguous (on purpose of course) ... I need to see the entire algorithm in order to know what is being performed. I know it's late but I'm pretty good with VB6 syntax and debugging VB6 code (VBA is an application internal version of VB6).

    • 10 years ago
  • sumeet00
    sumeet00
    • 10 years ago

    awaiting the complete code ..thr r lot of system functions call via the DLL and I know how it works and can help you in understanding the same...

    • 10 years ago
  • achilies
    achilies
    • 10 years ago

    Please provide the code in word format or in notepad and i will be able to complete the deobfuscation.

    • 10 years ago
  • michaelyos
    michaelyos
    • 10 years ago

    i want to try

    • 10 years ago

Show more comments

How to get started with contests

  • Post your contest

    Post Your Contest Quick and easy

  • Get tons of entries

    Get Tons of Entries From around the world

  • Award the best entry

    Award the best entry Download the files - Easy!

Post a Contest Now or Join us Today!