20 lines (14 loc) · 629 Bytes

_x64_Loader

Utilizing Alternative Shellcode Execution Via Callbacks

Shellcode Generation

Run shellcode script
Insert Output in main.cpp:

    char encryptedShellcode[] = "CHANGEME";
    char key[] = "CHANGEME";
    char cipherType[] = "CHANGEME";

Build with Visual Studio

Sandbox check / XORorAES / EnumUILanguagesW & InitOnceExecuteOnce

https://docs.microsoft.com/en-us/windows/win32/api/synchapi/nf-synchapi-initonceexecuteonce
https://docs.microsoft.com/en-us/windows/win32/api/winnls/nf-winnls-enumuilanguagesw