+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Rename entry point dll (/showthread.php?tid=6059253)
Rename entry point dll - Clovis V - Mar 23, 2020
Hi, I'm coding my own malware, and I'm tryin to remove some detections.
I'm focusing on two "TR/Dropper.Gen" detections, and I noticed that both are removed when I rename a function name I import like this :
Code
[DllImport("kernel32.dll")]
public static extern IntPtr LoadLibrary(string dllFilePath);Renaming LoadLibrary do the job, but of course the program can not find the entry point in the dll and raise a "EntryPointNotFoundException".
I don't know how I can easily change this and keep it workin as before, if you have any idea :)
Thanks
RE: Rename entry point dll - HFDone - Mar 23, 2020
you can use EntryPoint option but av still can catch it
[DllImport("kernel32.dll", EntryPoint="LoadLibrary")]
public static extern IntPtr Ll(string dllFilePath);
or search the section for call api by name
RE: Rename entry point dll - ArcticSlay - Apr 16, 2020
Bump for reading later on when you find an update please post!