Tools: pdfid.py, pdf-parser.py

 

Sample: 8598361ecbbffb35900d0720b0316a56.

Tools: oledump.py

ISC Diary entry: Video: Finding Property Values in Office Documents

Sample: 8598361ecbbffb35900d0720b0316a56.

Tools: oledump.py, base64dump.py, zipdump.py

ISC Diary entry: Video: Maldoc Analysis of the Weekend

Tools: oledump.py

ISC Diary entry: Video: Analyzing a Simple HTML Phishing Attachment