Digital documents are something we all consume in one form or another. Malwares have been making use of this medium for a very long time indeed, and even more so given the popularity of software ebook readers and the PDF format, which is mainly used for targeted spear phishing and as an exploits vector. MS Office files are also very popular targets given that Windows has the largest market share and most of the users use these software. Some of the more popular tools are as follows:
OfficeCat: This can be found at https://www.microsoft.com/enus/download/details.aspx?id=36852
OfficeMalScanner: This can be found at http://www.reconstructer.org/code.html with the various options as follows and the output of the
scan mode.
OffVis: This can be found at https://www.microsoft.com/en-us/download/details.aspx?id=2096. As shown in the following image, it uses a hex view and a selection of parsers from the drop down menu that can aid in auditing of the MS Office documents:
For PDF...
