tldr; they modify the program to something only the Enigma software understands.
How does this make it undetected? All the memory blocks in the original exe get modified making all the signatures for the
original exe useless.
Which i grabbed from THIS(Press this for further information) thread.
If you don't understand any of this, use google translate and translate any of this into German.