This non-memory resident, direct-action malware infects MenuetOS 32-bit or 16-bit executable files. Upon execution, it seeks suitable files for infection in the current folder.
It infects the files by either appending or prepending its code, depending on the type of files found suitable for infection.
It uses an anti-heuristic routine to avoid detection.
It runs on the MenuetOS platform.