Skip to content

Commit a4bb762

Browse files
UPDATE - preparing v2.0
1 parent d035e46 commit a4bb762

File tree

3 files changed

+17
-11
lines changed

3 files changed

+17
-11
lines changed

README.md

+14-8
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ You can also find XLM grammar in [xlm-macro-lark.template](XLMMacroDeobfuscator/
99

1010
# Installing the emulator
1111

12-
1. Install using pip (not recommended)
12+
1. Install using pip
1313

1414
```
1515
pip install XLMMacroDeobfuscator
@@ -84,18 +84,22 @@ default.config file must be a valid json file, such as:
8484
(______/ (_______/(_______)|/ \___/ |/ (_______)\_______)(_______/|/ \| )_( (_______)|/ \__/
8585
8686
87-
XLMMacroDeobfuscator(v0.1.9) - https://github.com/DissectMalware/XLMMacroDeobfuscator
87+
XLMMacroDeobfuscator(v0.2.0) - https://github.com/DissectMalware/XLMMacroDeobfuscator
8888
89-
usage: deobfuscator.py [-h] [-c FILE_PATH] [-f FILE_PATH] [-n] [-x] [-2]
89+
Error: --file is missing
90+
91+
usage: deobfuscator.py [-h] [-c FILE_PATH] [-f FILE_PATH] [-n] [-x]
92+
[--sort-formulas] [--defined-names] [-2]
9093
[--with-ms-excel] [-s] [-d DAY]
9194
[--output-formula-format OUTPUT_FORMULA_FORMAT]
92-
[--no-indent] [--export-json FILE_PATH]
95+
[--extract-formula-format EXTRACT_FORMULA_FORMAT]
96+
[--no-indent] [--silent] [--export-json FILE_PATH]
9397
[--start-point CELL_ADDR] [-p PASSWORD]
94-
[-o OUTPUT_LEVEL]
98+
[-o OUTPUT_LEVEL] [--timeout N]
9599
96100
optional arguments:
97101
-h, --help show this help message and exit
98-
-c FILE_PATH, --config_file FILE_PATH
102+
-c FILE_PATH, --config-file FILE_PATH
99103
Specify a config file (must be a valid JSON file)
100104
-f FILE_PATH, --file FILE_PATH
101105
The path of a XLSM file
@@ -114,9 +118,10 @@ optional arguments:
114118
Specify the format for output formulas ([[CELL-ADDR]],
115119
[[INT-FORMULA]], and [[STATUS]]
116120
--extract-formula-format EXTRACT_FORMULA_FORMAT
117-
Specify the format for extracted formulas ([[CELL-ADDR]],
118-
[[CELL-FORMULA]], and [[CELL-VALUE]]
121+
Specify the format for extracted formulas ([[CELL-
122+
ADDR]], [[CELL-FORMULA]], and [[CELL-VALUE]]
119123
--no-indent Do not show indent before formulas
124+
--silent Do not print output
120125
--export-json FILE_PATH
121126
Export the output to JSON
122127
--start-point CELL_ADDR
@@ -166,6 +171,7 @@ XLMMacroDeofuscator is adopted in the following projects:
166171
* [REMNUX](https://remnux.org/)
167172
* [IntelOwl](https://github.com/intelowlproject/IntelOwl)
168173
* [Assemblyline 4](https://cybercentrecanada.github.io/assemblyline4_docs/) by Canadian Centre for Cyber Security
174+
* [oletools](https://github.com/decalage2/oletools) by [@decalage2](https://twitter.com/decalage2)
169175

170176
Please contact me if you incorporated XLMMacroDeofuscator in your project.
171177

XLMMacroDeobfuscator/__init__.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
__version__ = '0.1.9'
1+
__version__ = '0.2.0'

setup.py

+2-2
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,9 @@
3434
license='Apache License 2.0',
3535
python_requires='>=3.4',
3636
install_requires=[
37-
"pyxlsb2@https://github.com/DissectMalware/pyxlsb2/archive/master.zip",
37+
"pyxlsb2",
3838
"lark-parser",
39-
"xlrd2@https://github.com/DissectMalware/xlrd2/archive/master.zip",
39+
"xlrd2",
4040
"untangle==1.1.1",
4141
"msoffcrypto-tool"
4242
],

0 commit comments

Comments
 (0)