Weird behavior in a patched program

		Exetools > General > General Discussion
Weird behavior in a patched program

Thread Tools

Display Modes

02-23-2022, 01:48

Doit

Friend

Join Date: Nov 2019

Location: The world

Posts: 7

Rept. Given: 2

Rept. Rcvd 0 Times in 0 Posts

Thanks Given: 310

Thanks Rcvd at 1 Time in 1 Post

Hi,
@TmC, that is the first thing I tried (IsDebuggerPresent), for the moment I have discarded it, although the program could check it from a file that I have not yet located.

@Stingered, I've tried all that. I'll take a look at those links.

@h4sh3m, In this case it is not a NET program, and I have also tried to deactivate ASLR with CFF, but with the same result.

I welcome any other suggestions, thanks.

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Evading behavior analysis	0xall0c	General Discussion	3	05-14-2018 23:44
armadillo strange behavior	drequinox	General Discussion	0	02-11-2006 08:52
weird search behavior	abitofboth	General Discussion	0	01-30-2005 20:48
A weird debugging question	sgdt	General Discussion	5	06-28-2004 13:11

All times are GMT +8. The time now is 13:46.