Sova stays resident in memory, occupying 5120 bytes. It infects COM and EXE files when they are accessed.
