Trojan that follows the process of:

  1. First loading shellcode
  2. Returning back to program data and running from there