ViperMonkey icon indicating copy to clipboard operation
ViperMonkey copied to clipboard

A VBA parser and emulation engine to analyze malicious macros.

Results 75 ViperMonkey issues
Sort by recently updated
recently updated
newest added

**Describe the bug** Using pypy2.7-7.3.8, error occurs when installing packages. **To Reproduce** Steps to reproduce the behavior: 1. On MacOS, using pip, install pypy2.7-7.3.8 2. pypy -m pip install -U...

bug
installation

The Rnd function does not return 71 if Randomize is not called. Steps to reproduce the behavior: Execute script: ``` intHighNumber = 100 intLowNumber = 1 intNumber = Int((intHighNumber –...

enhancement
VBA emulator

**Describe the bug** I have installed _vipermonkey_ in my Parrot OS using `sudo -H pip install -U https://github.com/decalage2/ViperMonkey/archive/master.zip` When I run (vmonkey) it I have the following error: **Screenshots** ![WhatsApp...

bug
Python 3

Hey, I had a bug with a simple VBA macro like this one: ```vba Sub Auto_Open() FileTest = "C:\Users\test\test.txt" Open FileTest For Output As #1 Write #1, "Test" Close #1...

bug

**Describe the bug** Hi, I have a .doc file ([test2.zip](https://github.com/decalage2/ViperMonkey/files/8163388/test2.zip)) that has test VBA macro in it which Vipermonkey is unable to analyze. The analysis stops to error "ERROR 'str'...

bug
VBA parser

Receiving the following error: ------------------------------------------------------------------------------- PARSING VBA CODE: INFO parsed Function ['SAOzzy'] ([ByRef ['FRcJIk'], ByRef ['TcSfEJA']]): 20 statement(s) INFO parsed Function ['CrjrHM'] ([ByRef ['IBAqabn'], ByRef ['fYjdNI']]): 9 statement(s) INFO parsed...

bug

When python 3 version is released, make sure we switch to the latest unidecode version. See #112 and #113

enhancement
Python 3

**Is your feature request related to a problem? Please describe.** Yes it's problem related. All the time have this python3 vs python2 issue, even when I start vipermonkey as python2....

bug

When vmonkey extracts artifact files, they are stored in a zip file `_artifacts.zip`, with password "infected".

documentation

Since ensurepip is disabled on Debian and Ubuntu. I had to install vmonkey on windows 10. However, I continue to get the below error. IOError: [Errno 2] No such file...

bug
Windows