3
votes
Accepted
Parse VBA Macro Digital Signature
Everything is documented in MS-OSHARED.
The files are DigSigInfoSerialized structures (2.3.2.1 in the link).
So first you read an UInt32 which is the size of the signature buffer.
Then you read an ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
macro × 4malware × 1
attacks × 1
digital-signature × 1
trojan × 1
pkcs7 × 1
mitre × 1
excel × 1
malware-analysis × 1