handle..ing SHAllocShared
December 25, 2020 in Code Injection
There couldn’t be a less misleading post title than the one I chose for this entry. The function SHAllocShared is documented, may not be very well known, but we may […]
You are browsing the archive for Code Injection.
Propagate, Ribbonate
December 22, 2020 in Anti-Forensics, Code Injection, Forensic Analysis, Malware Analysis
I thought Propagate technique is a dead horse. Described, implemented, used in malware. But. There is perhaps one more possibility, or four. When you open Windows Explorer and Ribbons are […]