<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>OLE &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/ole/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Thu, 30 Sep 2021 13:07:14 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>OLE &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>A Fun CTF-Like Malware</title>
		<link>https://blog.cerbero.io/a-fun-ctf-like-malware/</link>
					<comments>https://blog.cerbero.io/a-fun-ctf-like-malware/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 30 Sep 2021 13:07:14 +0000</pubDate>
				<category><![CDATA[Analysis]]></category>
		<category><![CDATA[chm]]></category>
		<category><![CDATA[Encrypted]]></category>
		<category><![CDATA[lnk]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[MSCrypto]]></category>
		<category><![CDATA[OLE]]></category>
		<category><![CDATA[Powershell]]></category>
		<category><![CDATA[Reversing]]></category>
		<category><![CDATA[Steganography]]></category>
		<category><![CDATA[VBA]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2224</guid>

					<description><![CDATA[From a Twitter post by InQuest, we analyzed an interesting malware: Encrypted MS Office Document, VBA, Windows Link File (LNK), OLE objects, Windows Help Files (CHM), PNG steganography and Powershell. SHA256: 46AFA83E0B43FDB9062DD3E5FB7805997C432DD96F09DDF81F2162781DAAF834 The analysis should take about 15-20 minutes in Cerbero Suite. Highly recommended! SPOILER ALERT: The images below show all the steps of our &#8230; <a href="https://blog.cerbero.io/a-fun-ctf-like-malware/" class="more-link">Continue reading<span class="screen-reader-text"> "A Fun CTF-Like Malware"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/a-fun-ctf-like-malware/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2224</post-id>	</item>
		<item>
		<title>CVE-2012-0158: RTF/OLE/CFBF/PE</title>
		<link>https://blog.cerbero.io/cve-2012-0158-rtfolecfbfpe/</link>
					<comments>https://blog.cerbero.io/cve-2012-0158-rtfolecfbfpe/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 23 May 2013 12:35:58 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[CVE-2012-0158]]></category>
		<category><![CDATA[OLE]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=1097</guid>

					<description><![CDATA[Since support for the RTF file format has been added very recently with the version 0.9.4 of the Profiler, it&#8217;s a good idea to test it against real malware. I downloaded a pack of RTFs from contagiodump.blogspot.com and as I promised in the last post chose a more recent vulnerability: CVE-2012-0158. The reason why I &#8230; <a href="https://blog.cerbero.io/cve-2012-0158-rtfolecfbfpe/" class="more-link">Continue reading<span class="screen-reader-text"> "CVE-2012-0158: RTF/OLE/CFBF/PE"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/cve-2012-0158-rtfolecfbfpe/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1097</post-id>	</item>
		<item>
		<title>Rich Text Format support (including OLE extraction)</title>
		<link>https://blog.cerbero.io/rich-text-format-support-including-ole-extraction/</link>
					<comments>https://blog.cerbero.io/rich-text-format-support-including-ole-extraction/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 29 Apr 2013 10:32:26 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[OLE]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=1037</guid>

					<description><![CDATA[The work on the upcoming 0.9.4 version of the Profiler has just begun, but there&#8217;s already an addition worth mentioning in depth: the support for RTF files. In particular there are two things which are quite useful: the preview of raw text and the extraction of OLE objects. Let&#8217;s start with the first one which &#8230; <a href="https://blog.cerbero.io/rich-text-format-support-including-ole-extraction/" class="more-link">Continue reading<span class="screen-reader-text"> "Rich Text Format support (including OLE extraction)"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/rich-text-format-support-including-ole-extraction/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1037</post-id>	</item>
	</channel>
</rss>
