Macro-less Word Doc. uses DDE to Execute Powershell, Download DLL | Yara
Try VMRay Analyzer
YARA Information
Ruleset Count 7
Match Count 0
Applied On Sample Files
Created Files
Modified Files
PCAP File
Process Dumps
Matched Rules
No YARA matches detected
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefox with deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image