Recovering password for Excel 97-2003 file (RC4)
#1
Hello,

I'm trying to recover a password from an old Excel 97-2003 file but can't get hashcat to work properly. I hope you can help me. I'm using the latest stable build on windows 10.

For sake of demonstration I'm using the example hash from the wiki (hash mode: 9700). Below is my full command. I have tried putting the hash in a text file (utf-8) and using that but the error I get is identical. I have tried all hash modes 9700, 9710, and 9720 with the same result

Here is my attempt:

Code:
.\hashcat64.exe -a 3 -w 3 -m 9710 $oldoffice$1*04477077758555626246182730342136*b1b72ff351e41a7c68f6b45c4e938bd6*0d95331895e99f73ef8b6fbc4a78ac1a ?b?b?b?b?b


and here is the output with the error that is thrown immediately:

Code:
hashcat (v5.1.0) starting...

* Device #1: WARNING! Kernel exec timeout is not disabled.
             This may cause "CL_OUT_OF_RESOURCES" or related errors.
             To disable the timeout, see: https://hashcat.net/q/timeoutpatch
OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce RTX 2080 Ti, 2816/11264 MB allocatable, 68MCU

./OpenCL/m09720_a3-optimized.cl: Pure OpenCL kernel not found, falling back to optimized OpenCL kernel
Hash '*04477077758555626246182730342136*b1b72ff351e41a7c68f6b45c4e938bd6*0d95331895e99f73ef8b6fbc4a78ac1a': Separator unmatched
No hashes loaded.

Started: Wed Jun 12 17:46:37 2019
Stopped: Wed Jun 12 17:46:37 2019


Any ideas what I'm doing wrong? Thankful for any help Smile
Reply
#2
You need to escape special characters your shell interprets. Read up on how to use your shell or put the hash in a txt file.
Reply
#3
(06-12-2019, 06:19 PM)undeath Wrote: You need to escape special characters your shell interprets. Read up on how to use your shell or put the hash in a txt file.

Thanks for the reply! However, as I said I "have tried putting the hash in a text file (utf-8) and using that but the error I get is identical"

Edit: I tried again and it worked. I must have been doing something wrong yesterday when I used a text file.
Reply