W97M/Class.Q

description-logoAnalysis

  • Virus consists of one macro module within the class storage
  • Virus hooks Word event handlers which prevents the opening or closing of documents
  • Polymorphic by inserting configuration settings as comment lines between instruction code in the virus body

Telemetry logoTelemetry