30.07.2012 Views

A Primer on Reverse Engineering Malwares

A Primer on Reverse Engineering Malwares

A Primer on Reverse Engineering Malwares

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Code Analysis<br />

…..with patience…<br />

The trojan seems to be looking for the<br />

string “test” in the “E-mail address” field.<br />

Launch the trojan and enter “test” to see<br />

what happens<br />

Behaviour Analysis Source - http://zeltser.com<br />

© 2011 KPMG, an Indian Partnership and a member firm of the KPMG network of independent member firms affiliated<br />

with KPMG Internati<strong>on</strong>al Cooperative (“KPMG Internati<strong>on</strong>al”), a Swiss entity. All rights reserved.<br />

Enter “test”, the trojan brings you to a brand new screen<br />

that seems to allow you to c<strong>on</strong>figure the trojan’s<br />

operati<strong>on</strong>.<br />

The c<strong>on</strong>figurati<strong>on</strong> opti<strong>on</strong>s let you define the passphrase<br />

to activate this string, the address where the trojan will<br />

send captured log<strong>on</strong> credentials, etc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!