Re: Can one of you know-it-alls please explain...
Obfuscation only gets you so far, and malware is often assembled out of verbatim chunks of other malware, so you can apply automated sequence matching or more code-specific algorithms such as entry-point fingerprinting.
Also, if the Word document in question used macros, those are delivered in source form to the victim.
Biting the hand that feeds IT
