17.06.2015 Views

SpyEye Banking Trojan. - SecNiche Security Labs

SpyEye Banking Trojan. - SecNiche Security Labs

SpyEye Banking Trojan. - SecNiche Security Labs

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Generic HWID – One Machine License<br />

VMProtect - More Sophisticated<br />

Inside Builder !<br />

Converts x86 into VM Pseudo code instructions. Binary is subjected with<br />

inbuilt small VM decrypting engine. Pseudo code is chosen at random. Hard to<br />

analyze and take long time because it is combined with HWID collectively.<br />

http://www.usenix.org/event/woot09/tech/full_papers/rolles.pdf

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!