pe-union icon indicating copy to clipboard operation
pe-union copied to clipboard

Marshal.GetDelegateForFunctionPointer

Open chainski opened this issue 1 year ago • 2 comments

image

I used ThreatCheck to perform static analysis on a built file and Trojan:MSIL/DCRat.J!MTB was detected Probably this line in API.cs was causing the problem

chainski avatar Mar 02 '24 15:03 chainski

That's a really nice analysis tool! Thanks for sharing.

bytecode77 avatar Mar 07 '24 14:03 bytecode77

That's a really nice analysis tool! Thanks for sharing.

You're welcome! You can also add it to repos like PEunion and r77 Rootkit so users can use it to test their payload effectively.

chainski avatar Mar 07 '24 18:03 chainski