diff --git a/oletools/msodde.py b/oletools/msodde.py index e7862cb..d235503 100644 --- a/oletools/msodde.py +++ b/oletools/msodde.py @@ -275,7 +275,7 @@ def process_ole_field(data): if data.lstrip().lower().startswith(u'dde'): #log.debug('--> is DDE!') return data - elif data.lstrip().lower().startswith(u'\00d\x00d\x00e\x00'): + elif data.lstrip().lower().startswith(u'\x00d\x00d\x00e\x00'): return data else: return u''