Last active
October 14, 2021 19:39
-
-
Save mint177/8338f33783e77702eec497d94c021e6d to your computer and use it in GitHub Desktop.
RTF obfuscation techniques
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{\rt- RTF SPECIFICATION SUCKS | |
{\u0097}} | |
{\uc2 \u0098}}} | |
{\uc2 \u0099\'**}} | |
{\uc2 \uc31682 \u0101} | |
{\u0100}} | |
{\uc-1 \u0102} | |
{\object\objemb\objw-\objh- | |
{\*\objclass \'50\'61\'63\'6b\'61\'67\'65} | |
{\*\objdata NOT_ENOUGH_MEMORY! \objdata | |
01050000 | |
02000000 | |
08000000 | |
{\*\Comment: original value 50 61 63 6b 61 67 65 00} | |
6\bin1000000000000000000000000000000000001P{\*\& HELLO!\bin1}\'}10\'3Z6\\\bin000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036\u0000b6167{\*\alt 0}6{\*\aup 0}{\*\acaps 0}{\atntime 5}0{\*\atntime 0}0 | |
00000000 | |
00000000 | |
3c010000 | |
0200 | |
65696361722e636f6d00 | |
433a5c546f6f6c735c65696361722e636f6d00 | |
00000300 | |
2f000000 | |
433a5c55736572735c41444d494e497e315c417070446174615c4c6f63616c5c54656d705c65696361722e636f6d00 | |
44000000 | |
58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a | |
2e000000 | |
43003a005c00550073006500720073005c00410044004d0049004e0049007e0031005c0041007000700044006100740061005c004c006f00630061006c005c00540065006d0070005c00650069006300610072002e0063006f006d00 | |
09000000 | |
650069006300610072002e0063006f006d00 | |
12000000 | |
43003a005c0054006f006f006c0073005c00650069006300610072002e0063006f006d00 | |
01050000 | |
00000000 | |
} | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment