Locked APCLdr: Payload Loader With Evasion Features [C]

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Features:

    no crt functions imported
    indirect syscalls using HellHall
    api hashing using the CRC32 hashing algorithm
    payload encryption using rc4 – payload is saved in .rsrc
    Payload injection using APC calls – alertable thread
    Payload execution using APC – alertable thread
    Execution delation using MsgWaitForMultipleObjects – edit this
    the total size is 8kb + the payload size
    compatible with LLVM (clang-cl) Option

This is the hidden content, please

• Sign In
• or
• Sign Up