rather than calling and executing its code directly, it planted the code inside another block of code that was already running in a process on the machine, then took the code that was running in that process and slipped it inside a block of code running in another process to further obscure it.
Not sure I can translate this into precise enough language to understand what's really going on. inserting blocks of instructions into other DLLs that have already been loaded into memory? I'm so amateur (but also, this description is pretty vague).
