2022-08-07 19:46:18 +01:00
2022-08-07 19:46:18 +01:00
2022-07-08 21:46:44 +01:00
2022-07-08 21:57:49 +01:00
2022-08-03 17:22:12 +01:00
2022-07-24 16:44:43 +01:00
2022-07-10 14:50:26 +01:00
2022-07-08 21:46:44 +01:00

WTSRM - Writing Tiny Small Reliable Malware demo repository for my corresponding talk.

  • Unhooks all Windows Dlls with \KnownDlls\
  • No CRT dependencies
  • Small size
  • Low entropy
  • Random string encryption key (thus no plaintext strings)
  • API hashing
  • Hook detection
  • Walks around hooks for initial unhooking on ntdll

Diagram

S
Description
Automated archival mirror of github.com/rad9800/WTSRM
Readme 2.7 MiB
Languages
C++ 100%