admin/Cracked5pider-Ekko
1
0
Fork 0
mirror of https://github.com/Cracked5pider/Ekko/ synced 2026-06-06 15:34:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'main' into main

Browse Source
This commit is contained in:
Adam Svoboda
2022-07-06 13:09:21 -05:00
committed by GitHub
parent 13f2da4109 9db598259d
commit c8b0bb224c
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1
View File
@@ -5,6 +5,7 @@
Ekko
</h1>
A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API.
Proof of Concept. Can be done better
Src/Ekko.c
+1 -1
View File
@@ -40,7 +40,7 @@ VOID EkkoObf( DWORD SleepTime )
Key.Length = Key.MaximumLength = 16;
Img.Buffer = ImageBase;
Img.Length = Key.MaximumLength = ImageSize;
Img.Length = Img.MaximumLength = ImageSize;
if ( CreateTimerQueueTimer( &hNewTimer, hTimerQueue, RtlCaptureContext, &CtxThread, 0, 0, WT_EXECUTEINTIMERTHREAD ) )
{