Skip to content

ViperMonkey 0.08

No due date 50% complete

Added emulation support for VBSscript (.vbs) and HTA (.hta) files.
Recursive analysis of packed VBScript files is supported (code given to Execute() is dynamically parsed and emulated).
Added support for reading additional data fields from Office documents.
Many bug fixes.
Additional regex support in Like and Replace operators.
Added additional VBA functi…

Added emulation support for VBSscript (.vbs) and HTA (.hta) files.
Recursive analysis of packed VBScript files is supported (code given to Execute() is dynamically parsed and emulated).
Added support for reading additional data fields from Office documents.
Many bug fixes.
Additional regex support in Like and Replace operators.
Added additional VBA function entry points from which to start emulation.
Additional support for analysis of in-memory documents (Erik Fichtner's work).
More short circuiting of loops used purely for obfuscation.
Un-aliasing of imported external function names in analysis report.
Added support for On Error Goto error handlers.
Better support for reading Excel spreadsheet cells.
Added more builtin Office enum constants.
Detect and block recursive change callback handler loops.
Added infinite loop detection in While loops.
Improved GOTO emulation.