hh86 Virus Writing Bulletin [1] January 2011
I found this technique a quite long time ago. This import mechanism has been available for more than 10 years! I took some time before even think to use it for an entrypoint obscuring virus.
[Read the article]
