A forum for reverse engineering, OS internals and malware analysis 

Trojans Employ Misdirection Instead of Obfuscation

Forum for analysis and discussion about malware.

Re: Trojans Employ Misdirection Instead of Obfuscation

 #8347  by EP_X0FF
 Tue Aug 30, 2011 8:54 am
All redirection here is trivial PEB->ImageName, CommandLine fields patch.
PExplorer will detect it with correct path in Libraries sub window.
 Return to “Malware”