Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Obfuscation Tool for MS Excel VBA [closed]

What are some recommendations of tools that can obfuscate VBA code across forms, modules and class modules?

I've done a bit of research and read up here in the archives but there hasn't been anything mentioned in a while so I thought those recommendations could be outdated.

A couple of picked up from reading on other places are:

  • CrunchCode
  • Obfu-VBA

Also, please correct me if I'm wrong but from my understanding the simplified logic of a obfuscator is:

  • Scramble the VBA code by using a defined logic (change X to Y)
  • The tool creates a new workbook where the VBA code is all scrambled, but everything else remains the same.
  • The tool can use the defined logic to revert back to the original VBA code (change Y to X)

Is that correct? What do I need to be looking into when selecting the 'defined logic'? I played around with CrunchCode before and there was a plethora of options but they were all foreign to me.

Thanks for any help :)

like image 678
Chronix3 Avatar asked May 27 '13 01:05

Chronix3


People also ask

Is VBA secure?

VBA macros are a common way for malicious actors to gain access to deploy malware and ransomware. Therefore, to help improve security in Office, we're changing the default behavior of Office applications to block macros in files from the internet.

Can VBA code be compiled?

You can compile your VBA code by clicking Debug Menu → Compile VBA Project. A compile error for a missing “End if” part of an IF statement. Every individual line in the code is correct, but together, they don't represent a complete IF statement.


1 Answers

I have bought CrunchCode and beware that it doesn't support 64-bit systems. Support is really bad (no email replies whatsoever over a few weeks). The string encryption feature will screw up all your string comparisons and MsgBoxes, as decrypted strings are not the same as the originals. Recommend to avoid this product!

like image 55
andrewkoay Avatar answered Oct 21 '22 04:10

andrewkoay