Custom-GetProcAddress

Name: Custom-GetProcAddress
Author: AbdouRoumi

A custom implementation of GetProcAddress, often used in malware to evade detection by bypassing standard API resolution methods

About this project

Custom-GetProcAddress NOTE I will use this function directly in the other malwares, try to check it before seeing the other projects "Understanding PE structures unlocks the secrets of Windows internals."

From the project README on GitHub

C++

Stars: 18
Forks: 4
License: MIT
Last push: 27 Dec 2024

View on GitHub

Add this badge to your README

Show that your project is listed on Made in Algeria.

[![Made in Algeria](https://www.madeinalgeria.dev/badge/custom-getprocaddress.svg)](https://www.madeinalgeria.dev/projects/custom-getprocaddress)

Related projects

MalwareEvasionTechniques

abdouroumi/malwareevasiontechniques

Research project showcasing various malware evasion techniques used to bypass AVs and EDRs, continuously updated with new methods.

41C++Tools & CLI

Early_Bird_APC_Injection

abdouroumi/early_bird_apc_injection

Code injection via Asynchronous Procedure Calls to bypass Windows defenses. Mapped to MITRE ATT&CK T1055.004.(Process Injection: Asynchronous Procedure Call).

33C++

R0m4NTAPI

abdouroumi/r0m4ntapi

Native API injector

27C++

GpuAbuser-Malware

abdouroumi/gpuabuser-malware

Research in progress: A malware that abuses the GPU to accelerate the decryption process.

21C++

PE_Inspector

abdouroumi/pe_inspector

A powerful PE file inspector for analyzing Portable Executable binaries, providing detailed insights into their structure, headers, and properties

21C++

Local-And-Remote_Function_Stomping

abdouroumi/local-and-remote_function_stomping

Function Stomping (MITRE ATT&CK ID: T1055.012) — Advanced injection technique overwriting legitimate functions with custom payloads to evade detection. Research & Educational purposes only

20C++