Here lies the malware analysis projects

THis is still on going

pdf

• peepdf

widnows

• open in linux with libre office, tools -> macros -> edit and u can see
• run in sandbox, see result
• viper monkey https://github.com/decalage2/ViperMonkey
• oledump.py python3 ../oledump.py -s 34 --vbadecompressskipattributes sample.bin, may need to leave out vbadecompressskipattributes for other objects

RTF

• https://isc.sans.edu/diary/Malicious+RTF+Files/21315
• https://forensicskween.com/ctf/cyberdefenders/emprisa-maldoc/

RE

• normal IDA, ghidra stuffs
• try debugging as well.