Peter M. Groen / oletools

Commit f56062def0e72718201c50392d866c2cdbeb3b7e

Authored by decalage2
1 parent da3d95e6

mraptor: added ExecuteExcel4Macro and ShellExecuteA (fixes #374)

Inline Side-by-side
Showing 1 changed file with 4 additions and 3 deletions
oletools/mraptor.py
  View file @f56062d
... ... @@ -23,7 +23,7 @@ http://www.decalage.info/python/oletools
23 23  
24 24 # === LICENSE ==================================================================
25 25  
26   -# MacroRaptor is copyright (c) 2016-2018 Philippe Lagadec (http://www.decalage.info)
  26 +# MacroRaptor is copyright (c) 2016-2019 Philippe Lagadec (http://www.decalage.info)
27 27 # All rights reserved.
28 28 #
29 29 # Redistribution and use in source and binary forms, with or without modification,
... ... @@ -58,8 +58,9 @@ http://www.decalage.info/python/oletools
58 58 # 2016-12-21 v0.51 PL: - added more ActiveX macro triggers
59 59 # 2017-03-08 PL: - fixed absolute imports
60 60 # 2018-05-25 v0.53 PL: - added Word/PowerPoint 2007+ XML (aka Flat OPC) issue #283
  61 +# 2019-04-04 v0.54 PL: - added ExecuteExcel4Macro and ShellExecuteA
61 62  
62   -__version__ = '0.53'
  63 +__version__ = '0.54dev14'
63 64  
64 65 #------------------------------------------------------------------------------
65 66 # TODO:
... ... @@ -132,7 +133,7 @@ re_write = re.compile(r'(?i)\b(?:FileCopy|CopyFile|Kill|CreateTextFile|'
132 133 RE_DECLARE_LIB = r'(?:\bDeclare\b[^\n]+\bLib\b)'
133 134  
134 135 re_execute = re.compile(r'(?i)\b(?:Shell|CreateObject|GetObject|SendKeys|'
135   - + r'MacScript|FollowHyperlink|CreateThread|ShellExecute)\b|' + RE_DECLARE_LIB)
  136 + + r'MacScript|FollowHyperlink|CreateThread|ShellExecuteA?|ExecuteExcel4Macro)\b|' + RE_DECLARE_LIB)
136 137  
137 138  
138 139 # === CLASSES =================================================================
... ...