CAPEv2 cannot handle with GoLang go-clr-based droppers

[yevhenprotsenko]

GoLang_ServHelper.zip

The password is infected. The final payload should be ServHelper RAT. The dropper should load the .NET ServHelper dropper into memory to execute it.

[kevoreilly]

Thanks - it's a well known issue that golang samples do not work well in cape. I'm actively researching the issues which are related to golang's use of its own stack which causes issues with api hooking. Watch this space.