Skip to content

Improve append_imports modification #3

Description

@matouskozak

TODO

  • Zero out old IDT when adding a new one.
  • Copy old ILT to a new section.
  • Calculate correct new size of combined IDT and all respective ILTs and write to Data Directory.
  • IAT should be at the beginning of .code section.
  • IAT has a record in Data Directories, maybe copy the old IAT and create new one.
  • To prevent easy detection of newly added adversarial imports, add dummy imports for the new entries to the binary.
  • Idata edata can be stored in .rdata section, make sure this case is handled properly by the modification

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingenhancementNew feature or requestgood first issueGood for newcomers

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions