Good software doing bad things 2
- Wednesday, August 18, 2010, 16:23
- Threat Research
Recently, my “Oh-So-Smart” colleague <3 Pete <3, highlighted Good Software Doing Bad Things and I was truly inspired and impressed. Thus, I went hunting. Hunting for other good software doing bad things. Now, I have a sequel to his excellent blog. In part 2, which I un-creatively penned, it relates to AutoIt archives doing memory injection.
Getting the handle to WriteProcessMemory with a AutoIT script.
The malware author has taken pains to pick up AutoIT scripting and hand crafting this malicious mutant. Fortunately, like all superhero or action movies, The S-Team wins. :)
Source: SophosLabs blog