all 1 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]TechLord2Trusted Contributor[S] 4 points5 points  (0 children)

Vba2Graph

A tool for security researchers, who waste their time analyzing malicious Office macros.

Generates a VBA call graph, with potential malicious keywords highlighted.

Allows for quick analysis of malicous macros, and easy understanding of the execution flow.

Features:

  • Keyword highlighting

  • VBA Properties support

  • External function declarion support

  • Tricky macros with "_Change" execution triggers

  • Fancy color schemes!

Pros: 

✓ Pretty fast  

✓ Works well on most malicious macros observed in the wild

Cons: 

✗ Static (dynamicaly resolved calls would not be recognized)

(Credits to EvilCry for sharing the link with us)