riskydissonance / SyscallsExample

Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SyscallsExample

Simple project using syscalls (via SysWhispers2) to execute MessageBox shellcode in a target process.

This doesn't use Windows API calls to allocate memory, create the thread etc so bypasses some detections and can make it harder for investigators and reverse engineers to determine what is going on.

Accompanying blog post: https://jmpesp.me/malware-analysis-syscalls-example/

About

Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.

License:BSD 3-Clause "New" or "Revised" License


Languages

Language:Assembly 65.9%Language:C 32.7%Language:C++ 1.4%