Didier Stevens

Monday 21 September 2015

PDF + DOC + VBAs Videos

Filed under: Malware,PDF — Didier Stevens @ 10:46

I produced videos showing how I created my “Test File: PDF With Embedded DOC Dropping EICAR” and how to change the settings in Adobe Reader to mitigate this.

2 Comments »

  1. Nice Tutorial and great work!!! 🙂
    I just Installed the latest Phyton 3-Version and tried to use your script, but as a Result a 1kb not readable PDF will be created.
    That is the complete Output:

    C:\exploit>make-pdf-embedded.py -a -s Anschreiben.doc a.pdf
    Traceback (most recent call last):
    File “C:\exploit\make-pdf-embedded.py”, line 117, in
    Main()
    File “C:\exploit\make-pdf-embedded.py”, line 114, in Main
    CreatePDFWithEmbeddedFile(pdfFileName, embeddedFileName, embeddedFileContent, options.filters, options.nobinary, options.autoopen, options.button, options.stego, options.message)
    File “C:\exploit\make-pdf-embedded.py”, line 80, in CreatePDFWithEmbeddedFile
    oPDF.stream2(8, 0, embeddedFileContent, ‘/Type /EmbeddedFile’, filters)
    File “C:\exploit\mPDF.py”, line 156, in stream2
    self.appendBinary(encodeddata)
    File “C:\exploit\mPDF.py”, line 55, in appendBinary
    fPDF.write(bytes(str, ‘ascii’))
    TypeError: encoding or errors without a string argument

    Any suggestions?

    Thanks!

    Comment by Martin — Tuesday 15 December 2015 @ 12:01

  2. Take a look at this post: https://blog.didierstevens.com/2015/07/20/if-you-have-a-problem-running-my-tools/

    Comment by Didier Stevens — Tuesday 15 December 2015 @ 14:53


RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out /  Change )

Cancel

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.