Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 c45fb5b7b4d549a6…

MALICIOUS

Office (OLE)

6.0 KB First seen: 2012-06-14
MD5: 0e6398b583bf143eec2665b8c81fed27 SHA-1: d2cdf2d9b956929378b824c60b798658ed067179 SHA-256: c45fb5b7b4d549a630c7bb2ac0acfd9a676399a182135a75ac0dd4702234a1ca
60 Risk Score

Malware Insights

The file is identified as a macro virus by ClamAV and its document body explicitly states it is a 'RSN MACRO VIRUS Goat file' created in 1997. The presence of macro code, indicated by the heuristic firing and the nature of the document body, suggests an attempt to execute malicious code upon opening. The file's self-description and metadata point to a historical macro virus, likely intended for propagation.

Heuristics 1

  • ClamAV: Win.Trojan.NO-1 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.NO-1