Word documents and Excel spreadsheet files can contain not just data, but executable code as well. This code is mostly used to automate tasks inside a document. This code can be malicious in nature as well. Attackers often use these macro documents to drop their malware on the target system.