From Collaborative RCE Tool Library
OfficeMalScanner
| Tool name: |
OfficeMalScanner |
|
| Author: |
Frank Boldewin |
| Website: |
http://www.reconstructer.org |
| Current version: |
v0.431 |
| Last updated: |
August 15, 2009 |
| Direct D/L link: |
Locally archived copy |
| License type: |
Free |
| Description: |
OfficeMalScanner is a MS office forensic tool to scan for malicious traces, like shellcode heuristics, PE-files or embedded OLE streams. It supports disassembly and hexview as well as an easy brute force mode to detect encrypted files. Next to this, an office file is being scanned for VB-macro code and if found, it will be extracted for further analysis. |
| Related URLs: |
|
Feed containing all updates for this tool.
If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
Feed containing all updates for this tool.
You are welcome to add your own useful notes about this tool, for others to see!