The process may add itself to "CurrentVersion\Run" keys to ensure it starts automatically with Windows.
Typically around 32,256 bytes or 173,056 bytes , though a UPX-packed version of 22,016 bytes has also been observed. The process may add itself to "CurrentVersion\Run" keys
A malware strain that spreads across networks and opens backdoors for remote attackers. 256 bytes or 173