Skip to content

IAT hooking: detecting replaced function within the same DLL #77

@hasherezade

Description

@hasherezade

There is a possibility that instead of an external hook, a replacement can be made, redirecting a function to another function within the same DLL.
Example:

demos.zip

It should be as well detected as an IAT hook.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions