Trojan-Spy.Win32.Banker.cmp
This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.
The Trojan copies itself to
%sysdir%\ntos.exe
with system, read only and archive attributes.
When copying it appends random-sized junk to…
Related Posts