NtDetours

NTSTATUS NTAPI TrInitPVOID ImageBase = &ImageBase; hacer que la IAT sea escribible. busca simple.cpp TimedSleepEx llama a la API SleepEx real a través del puntero de función TrueSleepEx. static DWORD WINAPI TrueSleepExDWORD dwMilliseconds, BOOL bAlertable = SleepEx; DWORD WINAPI TimedSleepExDWORD...

New Malware Can't Be Caught Napping

The aptly named Trojan Nap, a stealthy type of malware recently discovered by researchers at FireEye is able to evade detection methods by tricking scanners into thinking it’s asleep. This is according to researchers Abhishek Singh and Ali Islam with the California-based security firm who wrote o...