CYB3RMX / Qu1cksc0pe

All-in-One malware analysis tool.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

qu1ckSc0pe's nonExecAnalyzer module fails VBA Macro retrieval

patriciamespert opened this issue · comments

When executing qu1cksc0pe in order to analyze document files (--doc argument) qu1cksc0pe's nonExecAnalyzer module is used to initiate VBA Macro retrieval.

Problem gets here

if vbaparser.contains_macros == True:

Once olevba tool gets instantiated as vbaparser a non existing property (contains_macros) gets called causing an Exception therefore get this error "An error occured while parsing that file for macro scan"
Solution seems to replace contains_macro by contains_vba_macros.

This is the final output (once the problem is solved)
issue

Hello. Thank you for suggestions! It will be fixed A.S.A.P.