3 ms·
I'll be interested to look at that MtE disassembly in detail. Thanks for doing that work. If you enjoyed MtE you might enjoy the polymorphic engine from Natas
by EvanAnderson 5y ago
I'll be interested to look at that MtE disassembly in detail. Thanks for doing that work.
If you enjoyed MtE you might enjoy the polymorphic engine from Natas (published in 40Hex[0]). It's not as complex as MtE. It's a bit oddball in that it appends the decryption routine to the payload.
[0] http://cd.textfiles.com/group42/VIRUS/40HEX/40HEX122.HTM http://cd.textfiles.com/group42/VIRUS/40HEX/40HEX122.HTM