Trojan-Dropper.Win32.Small.ff

Detected	Mar 11 2004 11:03 GMT
Released	Mar 11 2004 11:03 GMT
Published	Mar 18 2004 14:30 GMT

Technical Details

This Trojan installs and executes a Trojan downloader program.

It is written in Visual C++ and packed using UPX. The size of the packed file is 55296 bytes, and the size of the unpacked file is 108544 bytes.

When launched, this Trojan creates and then executes a file named hrlypn35.dll in the Windows system directory. This file is TrojanDownloader.Win32.Rameh.b.

The program has no other malicious payload.

Print

Share

Malicious programs

Trojans

Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

secretly install Trojan programs and/or viruses
protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions

Trojan-Dropper.Win32.Small.aal

Trojan-Dropper.Win32.Small.af

Trojan-Dropper.Win32.Small.amj

Trojan-Dropper.Win32.Small.anx

Trojan-Dropper.Win32.Small.at

Trojan-Dropper.Win32.Small.aw

Trojan-Dropper.Win32.Small.bc

Trojan-Dropper.Win32.Small.bdx

Trojan-Dropper.Win32.Small.cb

Trojan-Dropper.Win32.Small.cm

Trojan-Dropper.Win32.Small.cw