Posts by Tag

dotnet

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

vmprotect

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

virtualization

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

harmony

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

vmp

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

callhijacker

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

vmunprotect

VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

part 1 VMUnprotect Call Hijacker for VMP: Part 1

3 minute read

Hello fellow readers! This is my exploration of VMProtect security. It’s well-known Software Protection with a lot of features, the main ones are code mutat...

Back to Top ↑

part 2 VMUnprotect Call Hijacker for VMP: Part 2

3 minute read

Now what if… we make an program that does everything for us! At first I made my approach that tries to search for function 0x06000153 in this sample. Which a...

Back to Top ↑

PEB

Analysing the Process Environment Block

6 minute read

The Process Environment Block is a critical structure in the Windows OS, most of its fields are not intended to be used by other than the operating system. I...

Back to Top ↑

TEB

Analysing the Process Environment Block

6 minute read

The Process Environment Block is a critical structure in the Windows OS, most of its fields are not intended to be used by other than the operating system. I...

Back to Top ↑

Windows Internals

Analysing the Process Environment Block

6 minute read

The Process Environment Block is a critical structure in the Windows OS, most of its fields are not intended to be used by other than the operating system. I...

Back to Top ↑