随笔分类 -  反取证

Load PE from memory（反取证）（未完）
摘要：Article 1：Loading Win32/64 DLLs "manually" without LoadLibrary() The most important steps of DLL loading are: Mapping or loading the DLL into memory. 阅读全文
posted @ 2016-01-27 18:06 _No.47 阅读(2128) 评论(0) 推荐(0)