[clamav-users] Sigtool parsing issues

David Shrimpton d.shrimpton at its.uq.edu.au
Mon Aug 15 17:47:30 EDT 2016

On Tue, 16 Aug 2016, Jack wrote:

> To note, the document opens fine in Microsoft Word, and oletools has no issues dumping out the macros.


I have observed this problem too with files 
that file reports as "Microsoft Word 2007+".

oledump will extract the macros but not sigtool.

clamav appears to still extract the macros and signatures
written against the macro code still work.

David Shrimpton

More information about the clamav-users mailing list