What are good anti-debug references for Windows which help with manual unpacking, emulating, or sandboxing?
closed as not constructive by Gilles, qbi, JMcAfreak, Jesper.Reenberg, asheeshr Mar 30 '13 at 1:50
As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance. If this question can be reworded to fit the rules in the help center, please edit the question.
- Peter Ferrie's “Ultimate” Anti-Debugging Reference (PDF, 147 pages) contains many anti-debugs, whether they're hardware or API based...
- Walied Assar's blog shows his researches, which are focused on finding new anti-debugs.
other (maybe redundant) resources:
- Nicolas Fallière's Windows Anti-Debug reference
- OpenRCE's Anti Reverse Engineering Techniques Database
- Daniel Plohmann's AntiRE
- Rodrigo Branco's Scientific but Not Academical Overview of Malware Anti-Debugging, Anti-Disassembly and Anti- VM Technologies
- Mark Vincent Yason's Art Of Unpacking