admin/senzee1984-InflativeLoading
1
0
Fork 0
mirror of https://github.com/senzee1984/InflativeLoading synced 2026-06-06 16:44:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Winslow
2024-04-11 21:18:19 -04:00
committed by GitHub
parent 7b2f126af3
commit 3377942e09
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -7,7 +7,7 @@ In this section, major updates are provided. Major updates do include added supp
### 4/11/2024 Added PE Signature Obfuscation
Only a few bytes in the PE header, such as `e_lfanew`, RVA of Import Directory, are essential to complete the loading process. Therefore, other bytes can be overwritten with random ones to hide PE header signatures.
After all the processes are completed, even these bytes will be overwritten for complete obfuscation. For instance, from the screenshot below, we can notice that the PE header is mostly obfuscated, but e_lfanew remains obfuscated for loading purposes. But after the loading process, `e_lfanew` is also obfuscated.
After all the processes are completed, even these bytes will be overwritten for complete obfuscation. For instance, from the screenshot below, we can notice that the PE header is mostly obfuscated, but `e_lfanew` remains obfuscated for loading purposes. But after the loading process, `e_lfanew` is also obfuscated.
![image](/screenshot/header_obfuscation.jpg)