Incident Response: P2 - stuck on Q11

Thank you for your guidance. Unfortunately, I haven’t made any progress yet. My extraction (full_macro.txt) from the source file (salary_ranges.docm) does not yield a valid result for the md5sum.

The provided hint—“You must convert the decimal values in the VBA script used to answer the previous question to ASCII characters. This is easiest to do using a script.”—and the brief lack sufficient detail to clarify the expected approach. Since the .txt file isn’t an OLE object, I pivoted to analyzing the contents after unzipping the source. I identified suspicious behavior in vbaProject.bin using several tools (plugin_http_heuristics.py, vba.yara, and oledump.py).

Despite external research, I haven’t found a clear methodology for converting the decimal values to ASCII as described. Any additional direction or clarification would be greatly appreciated.