SignHere is implementation of CVE-2017-11882. SignHere is builder of malicious rtf document and VBScript payloads.