Unique and Undocumented Malicious Loader Runs as Server, Executes Modules in Memory

ESET researchers have discovered a unique and previously undescribed loader for Windows binaries that, unlike other such loaders, runs as a server and executes received modules in memory.