Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

IAT hooking: detecting replaced function within the same DLL #77

Closed
hasherezade opened this issue Nov 22, 2020 · 0 comments
Closed

IAT hooking: detecting replaced function within the same DLL #77

hasherezade opened this issue Nov 22, 2020 · 0 comments
Assignees
@hasherezade

Comments

@hasherezade
Copy link
Owner

There is a possibility that instead of an external hook, a replacement can be made, redirecting a function to another function within the same DLL.
Example:

demos.zip

It should be as well detected as an IAT hook.
@hasherezade hasherezade self-assigned this Nov 22, 2020
@hasherezade hasherezade changed the title IAT hooking: detecting replaced function withing the same DLL IAT hooking: detecting replaced function within the same DLL Sep 2, 2021
hasherezade added a commit that referenced this issue Jan 18, 2022
@hasherezade
Merge branch 'iat2' (Issues: #98, #92, #77)
74100b5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@hasherezade hasherezade

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hasherezade