Waliedassar's Pastebin

Egypt 115,799 151,290 0 12 years ago

Name / Title	Added	Expires	Hits	Syntax
Detect VirtualBox (TYPE 0x7E TRICK)	Oct 7th, 2012	Never	1,680	C	-
Detect VirtualBox (Bios Brand & Bios Version) - WMI Code	Oct 5th, 2012	Never	1,831	C	-
Detect VirtualBox (Bios Brand & Bios Version Trick)	Oct 5th, 2012	Never	2,938	C	-
Detect VirtualBox (innotek trick)	Oct 4th, 2012	Never	2,426	C++	-
KdDebuggerEnabled	Oct 2nd, 2012	Never	388	C	-
OllyDbg v1.10 INT3/POPFD TRICK + PAGE_EXECUTE_WRITECOPY	Oct 1st, 2012	Never	303	C	-
PAGE_EXECUTE_WRITECOPY TRICK	Sep 26th, 2012	Never	1,643	C	-
Prefetch Input Queue (PIQ)	Sep 15th, 2012	Never	773	C	-
TimeDateStamps In PE Files	Sep 13th, 2012	Never	657	None	-
NtQueryInformationProcess (ProcessImageInformation, 0x25)	Sep 13th, 2012	Never	615	C	-
Extract Process EntryPoint	Sep 13th, 2012	Never	674	C	-
Detect VirtualBox (WNetGetProviderName)	Sep 11th, 2012	Never	2,844	C	-
The "ZwContinue" Function Anti-Attaching Trick	Sep 10th, 2012	Never	1,927	C	-
Enumerate All Loaded Modules	Sep 10th, 2012	Never	330	C	-
MemoryBasicVlmInformation (Extract SizeOfImage From Kernel)	Sep 9th, 2012	Never	707	C	-
Detect Wow64 User-Mode Hooks (Method 2)	Sep 9th, 2012	Never	315	C	-
Detect Wow64 User-Mode Hooks	Sep 8th, 2012	Never	884	C++	-
The PAGE_GUARD Anti-Dumping Trick (Method 2)	Sep 7th, 2012	Never	449	C	-
The PAGE_GUARD Anti-Dumping Trick	Sep 7th, 2012	Never	1,413	C	-
OllyDbg "STARTF_FORCEOFFFEEDBACK" trick	Aug 27th, 2012	Never	332	C	-
ZwClose (Anti-Debug)	Aug 22nd, 2012	Never	388	C	-
Sample common.arg	Aug 22nd, 2012	Never	482	None	-
Windows XP (SP2/SP3) SysCall ordinals	Aug 20th, 2012	Never	458	C	-
Detect VirtualBox (9 methods)	Aug 16th, 2012	Never	8,295	C	-
ZwQueryObject (AntiDebug) - XP & 7	Aug 13th, 2012	Never	326	C	-
Detect OllyDbg v1.10 (And many modified versions)	Aug 12th, 2012	Never	485	C	-
Detect OllyDbg v1.10 & v2.x	Aug 11th, 2012	Never	249	C	-
Detect OllyDbg v1.10	Aug 10th, 2012	Never	247	C	-
Typical Sequence Of Antidebug Tricks	Jul 28th, 2012	Never	1,697	C	-
Additional PEB.BeingDebugged Check	Jul 21st, 2012	Never	443	C	-
Windows 7 (Wow64) SysCall ordinals	Jul 9th, 2012	Never	386	C	-
Extract current thread EP.	Jun 23rd, 2012	Never	1,202	C	-
CodeView Parsing Code	Jun 21st, 2012	Never	323	C	-
Funny PE Header Processing	May 26th, 2012	Never	426	C	-
Legacy Dos Header Check	May 25th, 2012	Never	277	C	-

Most Recent 1 2