Commit Graph

183 Commits

Author SHA1 Message Date
Noteworthy 9a5d4d2e97 Update README.md 2016-10-20 15:54:57 +02:00
Noteworthy fd2b8da9b2 Merge pull request #62 from LordNoteworthy/Noteworthy
push binary
2016-10-20 15:53:00 +02:00
Lord Noteworthy 30d7dac9ac push binary 2016-10-20 15:52:40 +02:00
Noteworthy 2fa39d97ee Merge pull request #61 from LordNoteworthy/Noteworthy
add screenshot and compiled binary
2016-10-20 15:51:53 +02:00
Lord Noteworthy 6674d36dc2 add screenshot and compiled binary 2016-10-20 15:51:13 +02:00
Noteworthy 7427a49078 Merge pull request #60 from LordNoteworthy/Noteworthy
Noteworthy
2016-10-20 15:36:33 +02:00
Lord Noteworthy a0662273fb various fixes 2016-10-20 15:35:14 +02:00
Lord Noteworthy bd93f2e353 better printing of results 2016-10-20 15:19:34 +02:00
Noteworthy d189d83df4 Merge pull request #59 from LordNoteworthy/Noteworthy
Noteworthy
2016-10-20 14:02:32 +02:00
Lord Noteworthy d659e889f8 add resize console 2016-10-20 13:30:52 +02:00
Lord Noteworthy db5f7a23fd ignore log file in git 2016-10-20 10:48:46 +02:00
Lord Noteworthy 477995377c add support for logging to a file 2016-10-20 10:47:49 +02:00
Noteworthy 2ee003013d Merge pull request #58 from LordNoteworthy/Noteworthy
Noteworthy
2016-10-20 08:30:36 +02:00
Lord Noteworthy c3db303740 replace forgotten change 2016-10-20 08:27:39 +02:00
Lord Noteworthy e724db7c53 remove useless check 2016-10-20 08:24:30 +02:00
Lord Noteworthy e1b819df06 various fixes and code cleanup for timing functions 2016-10-19 23:07:52 +02:00
Lord Noteworthy 3df5d6f67d fix issue related to printing mac adr 2016-10-19 21:28:56 +02:00
Lord Noteworthy f632bbc202 fix some compilation warning issues 2016-10-19 19:53:15 +02:00
Lord Noteworthy 8a59a1c5a5 fix string idaq in anti analysis tricks 2016-10-19 17:28:22 +02:00
Noteworthy 8b8aaa54a1 Merge pull request #56 from LordNoteworthy/Noteworthy
Noteworthy
2016-08-02 16:30:59 +02:00
Lord Noteworthy 87ee34b7c7 add anti-sandboxe win32/locky trick 2016-08-02 16:30:08 +02:00
Lord Noteworthy 37084c15ad add sleep in a loop 2016-08-02 14:55:10 +02:00
Noteworthy fb943e1ed1 Merge pull request #55 from LordNoteworthy/Noteworthy
Noteworthy
2016-08-02 13:22:26 +02:00
Lord Noteworthy e2770bf9c6 output cleanup 2016-08-02 13:11:22 +02:00
Lord Noteworthy 55d2abf42b add setupdi_diskdrive anti-vm trick + main cleanup 2016-08-02 13:02:23 +02:00
Noteworthy a8ff8a3577 Merge pull request #54 from LordNoteworthy/Noteworthy
add hard disk check using WMI
2016-08-01 22:11:33 +02:00
Lord Noteworthy 0ec092e12f add hard disk check using WMI 2016-08-01 22:07:23 +02:00
Noteworthy 77f2f2c6a5 Merge pull request #53 from LordNoteworthy/Noteworthy
add cores number check from WMI
2016-07-26 20:09:49 +01:00
Lord Noteworthy a4dae5e03f add cores number check from WMI 2016-07-26 21:01:56 +02:00
Noteworthy bc645e3216 Merge pull request #52 from LordNoteworthy/Noteworthy
add task state segment trick via STR
2016-07-17 11:56:54 +01:00
Lord Noteworthy 8e6148cd24 add task state segment trick via STR 2016-07-17 12:55:01 +02:00
Noteworthy 4932bfa66b Merge pull request #51 from LordNoteworthy/Noteworthy
Noteworthy
2016-07-15 06:44:07 +01:00
Lord Noteworthy 6e49feb4ff support only 32bit for LDT, GDT, IDT VM checks 2016-07-15 07:42:35 +02:00
Lord Noteworthy 736e74f963 add Global Descriptor Table (GDT) VM check 2016-07-15 07:35:04 +02:00
Lord Noteworthy 09b8e24488 add Local Descriptor Table (LDT) VM check 2016-07-15 07:28:27 +02:00
Lord Noteworthy 333424d751 add Interupt Descriptor Table (IDT) VM check 2016-07-15 07:17:18 +02:00
Noteworthy 567a59d38a Add mrexodia to contributors. 2016-07-01 11:41:07 +00:00
Noteworthy 14d892d744 Merge pull request #50 from mrexodia/master
various fixes
2016-07-01 11:32:02 +00:00
Mr. eXoDia 7ba77a173e x64 PAGE_GUARD working 2016-07-01 11:43:53 +02:00
mrexodia 31e98461c8 don't ignore visual studio solution 2016-07-01 11:29:44 +02:00
mrexodia e676155ffe restore old UnhandledExceptionFilter 2016-06-28 05:22:05 +02:00
mrexodia f545aed8cd rewritten INT3 and INT 2D to use Vectored exception handlers 2016-06-28 05:14:46 +02:00
mrexodia 1fd5509d43 sometimes fixed SoftwareBreakpoints on x64 (added note) 2016-06-28 04:43:53 +02:00
mrexodia f339953be5 fixed NtGlobalFlag (incorrect assumptions about the position of the WOW64 PEB) 2016-06-28 04:36:25 +02:00
mrexodia 36fc33fadf fixed NtQueryObject_AllTypesInformation on x64 2016-06-28 04:06:42 +02:00
mrexodia 80ec64795d added notes for unreliable checks 2016-06-28 03:52:22 +02:00
mrexodia 2ee7d5467b fixed NtQueryObject_AllTypesInformation 2016-06-28 03:52:05 +02:00
mrexodia 7b37ba884c changed behavior + fixed NtQueryObject_ObjectTypeInformation 2016-06-28 03:51:51 +02:00
mrexodia 4e36bab8af added .editorconfig for current style + ignore database 2016-06-28 03:17:34 +02:00
mrexodia c93e373aa6 compile on x64 2016-06-28 03:16:45 +02:00