Tool to decode the encoded Shellcode of this type found in office documents
See the Blogpost to see how to use this. https://pcsxcetrasupport3.wordpress.com/2019/05/22/a-deeper-look-at-equation-editor-cve-2017-11882-with-encoded-shellcode/ I also have decoding notes for this sample in the 7Zip file. The password is the standard infected just incase something hits on the shellcode.
Update: 2021-09-13 Uploaded latest version of the Decoder Version 1.0.0.23 File name: DecodeEquationShellCode.7z No password required.