ghidra_SavePatch
ghidra_SavePatch copied to clipboard
Patched binary requires Admin rights
I had a simple executable that was meant for a Reverse Engineering challenge. I wanted to patch a JZ
to a JNZ
. This worked normally with Ghidra's "Export Binary" function, however I also wanted to try this extension since it is supposed to fix some issues.
After selecting the line and running the script, the produced binary now requires Admin priveleges to run, even though it did not before (the binary produced by Ghidra previously did not have this issue).
Is this normal behaviour? I don't see why that should happen.
I am on Windows 10 21H1 with Ghidra version 10.0