Exe File Disguised as a Word Document

Main Functions

Generate an exe file with a Word icon. After the exe runs, it automatically extracts the built - in Word document, self - copies to the %User%\Documents directory, launches the document, and then deletes itself.

Operation Methods

• Create a new listener.
• Run the module.

• Download the generated VS project.

• Modify the content of the Word document in the project (do not modify the file name!!!!!)

• Open the project in VS and compile it.

• Rename the compiled exe to a phishing file name.

For example, Security Development Manual.docx.exe

• Send it to the target via a spear - phishing email.

Running Effects

• After double - clicking the exe, a docx file will be extracted and opened locally, and then the exe file itself will be deleted.

• The program will copy itself to the %USER%\Documents directory and execute.