nerdexam
GIAC

GCIH · Question #36

Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil antivirus programs?

The correct answer is B. EliteWrap. EliteWrap is a binder utility that merges two executables into a single package and encrypts the result to evade antivirus detection.

Malware Analysis & Advanced Persistent Threats

Question

Which of the following tools combines two programs, and also encrypts the resulting package in an attempt to foil antivirus programs?

Options

  • ATrojan Man
  • BEliteWrap
  • CTiny
  • DNetBus

How the community answered

(63 responses)
  • A
    3% (2)
  • B
    89% (56)
  • C
    2% (1)
  • D
    6% (4)

Why each option

EliteWrap is a binder utility that merges two executables into a single package and encrypts the result to evade antivirus detection.

ATrojan Man

Trojan Man is not a recognized or documented binder or encryption utility used to combine programs and evade antivirus detection.

BEliteWrapCorrect

EliteWrap is a recognized trojan wrapper and binder tool that can attach a malicious payload to a legitimate executable and apply encryption to the combined package, making signature-based antivirus detection significantly harder by obscuring the embedded malware's known byte patterns.

CTiny

Tiny refers to lightweight compilers or minimal programs and is not associated with binding executables together and encrypting them to bypass antivirus software.

DNetBus

NetBus is a remote access trojan used for unauthorized remote control of a compromised system, not a tool for combining or encrypting multiple executables.

Concept tested: Trojan binder tool encrypting payloads to evade antivirus

Topics

#EliteWrap#trojan builder#AV evasion#malware packaging

Community Discussion

No community discussion yet for this question.

Full GCIH Practice