Dropper

From Wikipedia, the free encyclopedia

Jump to: navigation, search

A dropper is a program (malware component) that has been designed to "install" some sort of malware (virus, backdoor, etc) to a target system. The malware code can be contained within the dropper (single-stage) in such a way as to avoid detection by virus scanners or the dropper may download the malware to the target machine once activated (two stage).

[edit] Types

There are two major types of droppers. Some do not require user interaction which perform through the exploitation of a system by some vulnerability.

Others require user interaction by convincing the user that it is some legitimate or benign program. A dropper which installs a malware program to memory only is sometimes called an injector.

[edit] Examples

  • YAB: Yet Another Binder