Wazzu — Office (OLE) / .DOC malware analysis

Static analysis result for SHA-256 d5ce86de1dc7c0fe…

MALICIOUS

Office (OLE) / .DOC

12.5 KB Created: 1996-08-25 02:53:00 Authoring application: Microsoft Word for Windows 95
MD5: 586038b944bfa50a280e91dd57ccc7f5 SHA-1: f7c089c37cee8ec1ee93b18a91c1b1c9db5ba826 SHA-256: d5ce86de1dc7c0fe8171972750f07b5eb215beb8fa0a582230f02f860018d3a7
60 Risk Score

Malware Insights

Wazzu · confidence 95%

The file is identified as a malicious Word document by ClamAV, specifically as Win.Trojan.Wazzu-46. The document body explicitly states it is a 'goat DOC file for the Wazzu Word-For-Windows Macro virus' and references 'autoOpen' macros, indicating it's designed to execute malicious code upon opening. The presence of 'A:\wazzu.doc' suggests a potential path or filename associated with the malware.

Heuristics 1

  • ClamAV: Win.Trojan.Wazzu-46 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Wazzu-46