Win32.Murofet: what day is today?

" Murofet is able to infect executable files by injecting about 2000 bytes of its code at the end of the PE executable section; then the OEP is hijacked to the virus body.

This small viral code acts as a downloader, used by Murofet to drop on the system its main binary. When the infected file is run, the injected code imports some APIs used by the malware to create a new viral thread and then allows the original infected application to run."

Looks sophisticated? Thought some might like to see, from Prevx blog:

http://www.prevx.com/blog/158/WinMurofet-what-day-is-today.html

 

Thanks for the link etc