Malware
DevilsTongue
According to Microsoft, DevilsTongue is a complex modular multi-threaded piece of malware written in C and C++ with several novel capabilities.
DevilsTongue is a Windows malware family operated by Caramel Tsunami.
Background
Microsoft describes DevilsTongue as an intricate, modular, multi-threaded malware coded in C and C++ that introduces several novel features. On disk, its files have PDB paths and PE timestamps wiped, strings and configurations encrypted, and a distinct hash per file. Core functionality lives in DLLs that remain encrypted on disk and are only decrypted in memory, hampering detection, while keeping configuration and tasking data separate from the malware to frustrate analysis. DevilsTongue operates in both user mode and kernel mode.
Source: Malpedia (Fraunhofer FKIE).