Method and system for detecting malicious programs integrated into an electronic document

Method for detecting malicious software in an electronic document, where the method comprises:

• a) detecting an executable code in the electronic document provided to a client module (100);
• b) extracting, in the client module, information from the electronic document comprising the executable code and metadata of the electronic document;
• c) creating, in the client module, a binary vector associated with the electronic document based on certain characteristics obtained from the extracted information;
• d) comparing, in a classifier module (200), the binary vector with one or more groups of vectors previously classified and stored in a database (400);
• e) as a result of the comparison, classifying the binary vector in one of the groups of previously classified vectors, where each group of vectors has associated therewith in the database a verdict about the presence of malicious software;
• f) determining, in the database, that the electronic document contains malicious software depending on the verdict associated with the group in which its associated binary vector has been classified.