4 ms·

Is this really worth an article? The anti-debugging protection just stops executables using a list of hardcoded filenames (eg. Wireshark.exe). This is neither

Is this really worth an article? The anti-debugging protection just stops executables using a list of hardcoded filenames (eg. Wireshark.exe). This is neither interesting nor new and was already implemented 20 years ago by script kiddies. What's next? A VBS Trojan that takes commands via Matrix instead of IRC?

kortex 4y ago
I thought it was interesting. I've never heard of some of these techniques.
analog31 4y ago
Yes. Some of us depend on the smart people finding this stuff, before this stuff finds us.