http://news.poseidon-us.com/TGYHhl
I found a sample that is a Word document with an embedded executable. I'll explain how to extract the embedded executable with my tools.
http://news.poseidon-us.com/TGYHhl
http://news.poseidon-us.com/TGYHhl