[Clovis V]

Hi, I'm coding my own malware, and I'm tryin to remove some detections.
I'm focusing on two "TR/Dropper.Gen" detections, and I noticed that both are removed when I rename a function name I import like this :

Code

[DllImport("kernel32.dll")]
public static extern IntPtr LoadLibrary(string dllFilePath);

Renaming LoadLibrary do the job, but of course the program can not find the entry point in the dll and raise a "EntryPointNotFoundException".

I don't know how I can easily change this and keep it workin as before, if you have any idea :)

Thanks

[HFDone]

you can use EntryPoint option but av still can catch it

[DllImport("kernel32.dll", EntryPoint="LoadLibrary")]
public static extern IntPtr Ll(string dllFilePath);

or search the section for call api by name

[ArcticSlay]

Bump for reading later on when you find an update please post!