Swimming Into Hostile Code

Trojan-GameThief.Win32.Magania, according to Kaspersky naming convention, monitors the user activities trying to obtain valuable information from the affected user, especially about gaming login accounts. From a functional point of view you can check this post also:

http://evilcodecave.blogspot.com/2009/08/how-fastly-bypass-hostile-code-for.html

Where you can find also files and registry entries to Remove Megania.

In this paper we will analyse more deeply the structure of this malware, especially the polymorphic part that represents a typical sample of hostile code.