![]() |
|
|
|
#1
|
||||
|
||||
|
Here is a short info.
After unpack put a mem bp on access on each section from last to first and run. If the bp is hit then that section is used else you can remove with CFF Explorer or LordPE. Don't forget to rebuild the exe after sections removal.
|
![]() |
| Tags |
| armadillo, bruteforce, certificate, key, tool |
| Thread Tools | |
| Display Modes | |
|
|