[SANS ISC] A Mix of Python & VBA in a Malicious Word Document

I published the following diary on isc.sans.edu: “A Mix of Python & VBA in a Malicious Word Document“:

A few days ago, Didier wrote an interesting diary about embedded objects into an Office document. I had a discussion about an interesting OLE file that I found. Because it used the same technique, I let Didier publish his diary first. Now, let’s have a look at the document.

It’s an OLE file that contains an embedded object… [Read more]