Analysis of a MICROSOFT WORD INTRUDER sample: execution, check-in and...

Edit 27-5-2015: I added a download link to the memory dump of the machine I used in this article for others to learn from and play around with volatility. On April 1st FireEye released a report on...