Good software doing bad things 2

Filed Under: SophosLabs

Recently, my "Oh-So-Smart" colleague <3 Pete <3, highlighted Good Software Doing Bad Things and I was truly inspired and impressed. Thus, I went hunting. Hunting for other good software doing bad things. Now, I have a sequel to his excellent blog. In part 2, which I un-creatively penned, it relates to AutoIt archives doing memory injection.

Getting the handle to WriteProcessMemory with a AutoIT script.

The malware author has taken pains to pick up AutoIT scripting and hand crafting this malicious mutant. Fortunately, like all superhero or action movies, The S-Team wins. :)

You might like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s