Due to antivirus softwares scan this shellcode and detect it as malware, we should use create password-protected archive to protect it. Password to open this file: infected

This commit is contained in:
Quang Nguyễn
2020-03-04 01:04:49 +07:00
parent 4c87d3b293
commit e7182cf803
3 changed files with 7 additions and 3 deletions
+7 -3
View File
@@ -4,11 +4,15 @@
# Built on top of Unicorn emulator (www.unicorn-engine.org)
import sys
from zipfile import ZipFile
sys.path.append("..")
from qiling import *
if __name__ == "__main__":
sc = open("shellcodes/win32_https_download.bin",'rb').read()
ql = Qiling(shellcoder = sc, archtype = "x86", ostype = "windows", rootfs="rootfs/x86_windows", output = "debug")
ql.run()
zip_reader = ZipFile("shellcodes/win32_https_download.zip")
with zip_reader.open('win32_https_download.bin', 'r', b'infected') as f:
sc = f.read()
ql = Qiling(shellcoder = sc, archtype = "x86", ostype = "windows",
rootfs="rootfs/x86_windows", output = "debug")
ql.run()
Binary file not shown.
Binary file not shown.