the program uses the int 16 maybe can identified as keylogger
|
Assembly
emu8086 Virus Alert |
|
Virus Co will report many things has virus, eg anything that's coded in asm is suspect.
Example: if your write a win32 hello world! and use section '.text' code readable executable writeable instead of section '.text' code readable executable Its will be reported by some AV as a virus. (Mar 4, 2012 04:18 PM)MUT4NT Wrote: that can not be, all code of a program is asm also the program if you do set is a single segmentYour wrong, even if you forget about .net, if you open a exe coded with c or c++ in a hexeditor theres tel tail signs, of what it was compiled with. Then there's size, if you encrypted it, its then seen as suspect, note: i did not say that all ASM code apps are seen as virus, but anything coded in full ASM is seen as suspect, and if AV see too many suspect things in a exe, its reported as a virus. (Mar 4, 2012 07:13 PM)DexHacker Wrote: Your wrong, even if you forget about .net, if you open a exe coded with c or c++ in a hexeditor theres tel tail signs, of what it was compiled with.clear programs created as .net, java, vb are interpreted not executed, I meant program made in languages such as assembler, C/C + +, pascal, delphi(code native) these are compiled and the machine code is the same different is when the amount of size machine instructions using each for its purpose. programming in assembly language programming means not only virus
Take a c++, or pascal compiled program and open them in a hex editor and see the ASCII part, you will find label as what it was coded in in plain txt.
Even shell code, example see my post here: https://hackforums.net/showthread.php?ti...id18287143 Look up what mingw is.
See here: this shows that normally AV co, can tell what a app/virus was coded in
https://hackforums.net/showthread.php?tid=2287837 |
|
|