Entry point obfuscation (or also “obscuring”) is the technique viruses nested inside .exe files use to call their malicious code. They hide the infection by using unusual places inside the binary from where they jump to the malicious virus code.
If you want to know how exactly EPO works by a real life example Peter Szor wrote a nice document in 2005 (but still valid today).
Download it here.


