admin/mgeeky-ShellcodeFluctuation
1
0
Fork 0
mirror of https://github.com/mgeeky/ShellcodeFluctuation synced 2026-06-06 16:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

readme

Browse Source
This commit is contained in:
Mariusz B. / mgeeky
2021-09-29 16:19:40 +02:00
parent d44d3facfe
commit 472c594235
2 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -117,7 +117,7 @@ However, no `Abnormal private executable memory` IOC this time. Our fluctuation
And for the record, `pe-sieve` has no issues with our fluctuating shellcode as well:
![pe-sieve](images/pe-sieve1.png)
![pe-sieve](images/pe-sieve2.png)
So we're able to see already that there are no clear references pointing back to our shellcode, at least memory IOC-wise. But what about that modified `kernel32` IOC?
images/pe-sieve2.png
BIN
View File
Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 111 KiB