17 Sep 2025
Biztonsági szemle
CTRL-Z DLL Hooking, (Wed, Sep 17th)
When you're debugging a malware sample, you probably run it into a debugger and define some breakpoints. The idea is to take over the program control before it will perform âinterestingâ actions. Usually, we set breakpoints on memory management API call (like VirtualAlloc()) or process activities (like CreateProcess(), CreateRemoteThread(), ...).
Read more