Wazzu — Office (OLE) / .EXE malware analysis

Static analysis result for SHA-256 1ad9c04e52fd1503…

MALICIOUS

Office (OLE) / .EXE

11.0 KB Created: 1996-08-25 01:26:00 Authoring application: Microsoft Word for Windows 95
MD5: 610f2ff2f0e8b035768839d8afd254ba SHA-1: fcbd202ef8ab68d03d6aedee31c293ba0567440a SHA-256: 1ad9c04e52fd1503e557197e7e861253b7b21e853c6f8619f67bd2989e861d61
60 Risk Score

Malware Insights

Wazzu · confidence 95%

The file is identified as the Wazzu macro virus by ClamAV. The document body explicitly states it is a 'goat DOC file for the Wazzu Word-For-Windows Macro virus' and mentions macro names like 'autoOpen' and 'fileMacro', indicating its self-replicating nature within Microsoft Word documents. The extracted paths suggest locations where the virus may store its components or infect other files.

Heuristics 1

  • ClamAV: Win.Trojan.Wazzu-46 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Wazzu-46

Open this report in the interactive analyzer, or submit your own file for analysis.