Waliedassar's Pastebin

Egypt 114,880 139,141 0 12 years ago

Name / Title	Added	Expires	Hits	Syntax
Detect VirtualBox (TYPE 0x7E TRICK)	Oct 7th, 2012	Never	1,572	C	-
Detect VirtualBox (Bios Brand & Bios Version) - WMI Code	Oct 5th, 2012	Never	1,704	C	-
Detect VirtualBox (Bios Brand & Bios Version Trick)	Oct 5th, 2012	Never	2,728	C	-
Detect VirtualBox (innotek trick)	Oct 4th, 2012	Never	2,242	C++	-
KdDebuggerEnabled	Oct 2nd, 2012	Never	358	C	-
OllyDbg v1.10 INT3/POPFD TRICK + PAGE_EXECUTE_WRITECOPY	Oct 1st, 2012	Never	285	C	-
PAGE_EXECUTE_WRITECOPY TRICK	Sep 26th, 2012	Never	1,544	C	-
Prefetch Input Queue (PIQ)	Sep 15th, 2012	Never	693	C	-
TimeDateStamps In PE Files	Sep 13th, 2012	Never	599	None	-
NtQueryInformationProcess (ProcessImageInformation, 0x25)	Sep 13th, 2012	Never	586	C	-
Extract Process EntryPoint	Sep 13th, 2012	Never	574	C	-
Detect VirtualBox (WNetGetProviderName)	Sep 11th, 2012	Never	2,567	C	-
The "ZwContinue" Function Anti-Attaching Trick	Sep 10th, 2012	Never	1,827	C	-
Enumerate All Loaded Modules	Sep 10th, 2012	Never	302	C	-
MemoryBasicVlmInformation (Extract SizeOfImage From Kernel)	Sep 9th, 2012	Never	667	C	-
Detect Wow64 User-Mode Hooks (Method 2)	Sep 9th, 2012	Never	295	C	-
Detect Wow64 User-Mode Hooks	Sep 8th, 2012	Never	788	C++	-
The PAGE_GUARD Anti-Dumping Trick (Method 2)	Sep 7th, 2012	Never	419	C	-
The PAGE_GUARD Anti-Dumping Trick	Sep 7th, 2012	Never	1,337	C	-
OllyDbg "STARTF_FORCEOFFFEEDBACK" trick	Aug 27th, 2012	Never	314	C	-
ZwClose (Anti-Debug)	Aug 22nd, 2012	Never	363	C	-
Sample common.arg	Aug 22nd, 2012	Never	462	None	-
Windows XP (SP2/SP3) SysCall ordinals	Aug 20th, 2012	Never	336	C	-
Detect VirtualBox (9 methods)	Aug 16th, 2012	Never	7,998	C	-
ZwQueryObject (AntiDebug) - XP & 7	Aug 13th, 2012	Never	287	C	-
Detect OllyDbg v1.10 (And many modified versions)	Aug 12th, 2012	Never	454	C	-
Detect OllyDbg v1.10 & v2.x	Aug 11th, 2012	Never	234	C	-
Detect OllyDbg v1.10	Aug 10th, 2012	Never	230	C	-
Typical Sequence Of Antidebug Tricks	Jul 28th, 2012	Never	1,565	C	-
Additional PEB.BeingDebugged Check	Jul 21st, 2012	Never	302	C	-
Windows 7 (Wow64) SysCall ordinals	Jul 9th, 2012	Never	364	C	-
Extract current thread EP.	Jun 23rd, 2012	Never	1,081	C	-
CodeView Parsing Code	Jun 21st, 2012	Never	304	C	-
Funny PE Header Processing	May 26th, 2012	Never	380	C	-
Legacy Dos Header Check	May 25th, 2012	Never	259	C	-

Most Recent 1 2