In diary entry “VBA Project Passwords” I explained that VBA project passwords in malicious documents don’t hinder analysis: you can just extract the macros without knowing the password. It’s only when you would perform a dynamic analysis with the step-by-step debugger of the VBA IDE, that the password would prevent you from doing this. But there are simple methods to remove the password, and then you can go ahead with your debugging.
Article Link: https://isc.sans.edu/diary/rss/26390