Questions tagged [anti-dumping]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
42 views

Bypass anti memory dump with process hacker and dump the malware?

I have a malware that has some sort of anti dumping technique, so when i dump a region of memory with process hacker it dumps a 0 byte file, i am also running the process hacker as a unrestricted user ...
0
votes
0answers
26 views

send screenshot to server if client is found under debug

if the client under debug detect there are some debugger attached, like throwing out single step exception, will it take a screenshot of my desktop then send to its server to prove that I am trying to ...
0
votes
0answers
18 views

editing an executable VB file which extracts another vb file from itself

well, I don't know if the title suffices or not. so I'm going in details: there's a VB target I'm working on and it is packed. I unpacked it ok but the main exe extracts another exe from within itself ...
4
votes
4answers
15k views

Finding OEP in a VMProtect v3.0 protected malware

I've been trying to reverse engineer a malware that has been packed with VMProtect v3.0. My first instinct was to google an automated way for this and I found a script. Unfortunately the script to ...
3
votes
0answers
318 views

Anti-Anti-Dump Approaches

tl;dr: What would be alternative approaches for attacking an anti-dump design that allocates encrypted blocks of code on the heap and uses a vm to resolve addresses and decrypt before execution? I'm ...
2
votes
0answers
573 views

Anti-dumping techniques [duplicate]

After handing on some crackmes using packed codes, I am now curious about anti-dumping techniques. For the crackmes I have encoutered, my method is as follows: after the program unpacks itself, I take ...