nerdexam
GIAC

GCIH · Question #176

You want to add a netbus Trojan in the chess.exe game program so that you can gain remote access to a friend's computer. Which of the following tools will you use to accomplish the task? Each…

The correct answer is B. Yet Another Binder C. Pretator Wrapper. Trojan binders and wrappers merge a malicious executable with a legitimate program so the trojan executes silently when the host application is launched.

Malware Analysis & Advanced Persistent Threats

Question

You want to add a netbus Trojan in the chess.exe game program so that you can gain remote access to a friend's computer. Which of the following tools will you use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ATripwire
  • BYet Another Binder
  • CPretator Wrapper
  • DBeast

How the community answered

(48 responses)
  • A
    6% (3)
  • B
    77% (37)
  • D
    17% (8)

Why each option

Trojan binders and wrappers merge a malicious executable with a legitimate program so the trojan executes silently when the host application is launched.

ATripwire

Tripwire is a defensive file integrity monitoring tool that detects unauthorized changes to system files; it has no capability to bind or embed malicious code into executables.

BYet Another BinderCorrect

Yet Another Binder (YAB) is a well-known file-binding utility that combines two or more executables into a single file, enabling an attacker to silently embed a trojan payload inside a legitimate program like chess.exe so both run on launch.

CPretator WrapperCorrect

Pretator Wrapper is a wrapper tool that encapsulates a trojan inside a host executable; when the combined file is executed, the legitimate application runs visibly while the hidden trojan payload executes in the background without alerting the user.

DBeast

Beast is itself a Remote Access Trojan client-server backdoor used to control infected hosts; it is not a binder or wrapper utility designed to embed payloads inside other executables.

Concept tested: Trojan binding and wrapping tools

Topics

#Trojan binding#file wrapping#NetBus#remote access Trojan

Community Discussion

No community discussion yet for this question.

Full GCIH Practice