NCWrapper 1.0
(TrojanDropper.Win32.Small.dw)

by illwill

Written in Assembly

Released in January 2004


NCWrapper 1.0
Coded by illwill in Assembly
1/30/04

====================================================================
description:
 Automatically expands Netcat to the windows directory and executes 
 user-choosen parameters
====================================================================
features:
*only 31 kb :)
*self-deletes after expanding/running commands (netcat is left running)


Editor Instructions:
1. extract the nc.exe and Editor.exe to a folder
2. open editor.exe
3. Press the [...] button to browse for nc.exe
4. select nc.exe 
5. hit the Read button
6. enter the command you want to execute to netcat
7. Write the new exe
8. send the exe to your victims

illwill
 

dropped files:
c:\WINDOWS\del.bat  size: 256 bytes 
c:\WINDOWS\nc.exe   size: 59.392 bytes 

startup:
none

MegaSecurity