|Detected||Mar 20 2004 09:56 GMT|
|Released||Mar 20 2004 09:56 GMT|
|Published||Feb 02 2007 08:29 GMT|
This Trojan is designed to install and launch other programs on the victim machine. It is a Windows PE EXE file. The file is 15,872 bytes in size. It is packed using UPX. The unpacked file is 48 640 bytes in size.
Once launched, the Trojan extracts the following files from itself and launches them for execution:
The Trojan also extracts the following DLL file from its body:
In order to ensure that the Trojan is launched automatically when the system is rebooted, the Trojan registers its executable file in the system registry:
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to: