| Inside Win32:AOC |
|
Win32:AOC aka Anvil of Crom is a small file infector written by Bumblebee. It appends own code to the last section of exe and dll files. The virus body is encrypted with more than one layer.
We can see the call to the decryptor on the top of the disassembly. The rest is under the first [...] Read more: avast! blog |