• 09 September 2015 mak #injection #malware #RE

    A funny little obfuscation technique

    Article thumbnail

    Recently we ran across a quite an interesting sample, which used an interesting obfuscation technique that was beautiful in its simplicity. But before we dive in, let us provide some background for it. One of the easier and most common techniques for automatic unpacking is to hook kernel32!WriteProcessMemory and …

    Read more