Completed
allocate memory
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Revisiting Ring3 API Hooks: Tricks to Defeat Analysis Tools - Rafael Salema Marquez - Ekoparty - 2021
Automatically move to the next video in the Classroom when playback concludes
- 1 Introduction
- 2 Agenda
- 3 Rafaels background
- 4 What is important
- 5 Dark side
- 6 Credentials
- 7 Expose new techniques
- 8 Basic knowledge
- 9 What is API hooks
- 10 Avoid distractions
- 11 Inline hooks
- 12 IAT hooks
- 13 Regular flow
- 14 How it works
- 15 Detection strategies
- 16 Egg hook
- 17 Egg hook explanation
- 18 Create process suspended
- 19 allocate memory
- 20 the fun part
- 21 proof of concept
- 22 virtual machine
- 23 fast look
- 24 results
- 25 actual results
- 26 outro
