Upon execution, this macro virus displays the following message:
"Class.Poppy CONSTRUCTION KIT by VicodinES"
It is then able to generate macro viruses with various configurable characteristics, among which are as follows:
- Method of infection/replication
- Self-recognition technique
- Which automacros to hook
The infected document containing the new macro virus is saved in the My Documents folder.
Analysis by: Michael Lactaotao