Change Callobfuscator IoC (.cobf section name)

Browse Source

Changed the original code, so that the hardcoded section name (.cobf) is now (.rdatas)

https://github.com/d35ha/CallObfuscator/blob/master/src/obfuscate.cpp#L220-L225

// Set the shellcode section properties.
    PIMAGE_SECTION_HEADER prev_sec = sh_sec - 1;
    sh_sec->Name[0] = '.'; sh_sec->Name[1] = 'r';
    sh_sec->Name[2] = 'd'; sh_sec->Name[3] = 'a';
    sh_sec->Name[4] = 't'; sh_sec->Name[5] = 'a';
    sh_sec->Name[6] = 's'; sh_sec->Name[7] = '\0';

...

This commit is contained in:

S3cur3Th1sSh1t

2022-08-27 21:46:40 +02:00

parent 7a81bd4e51

commit 5d6fde4d06

2 changed files with 0 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

cobf/cobf_x64.exe

BIN

Binary file not shown.

cobf/cobf_x86.exe

BIN

Binary file not shown.