New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

vmprotect packer donut error #160

Open

qwer0123456 opened this issue Oct 7, 2024 · 0 comments

qwer0123456 commented Oct 7, 2024

added initial ETW bypass. works in debug loader, but not when injected into notepad
https://github.com/TheWover/donut/tree/29871f7b9f38d8fb2ee59da4f0cd09302484f9a4

Since this update in version 0.93, vmprotect packed files are not executed as donut shellcode

added initial ETW bypass Before this update, the vmprotect packer also ran as donut shellcode

How do I make it work in version 1.0?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment