Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Hiding in plain sight.

23 Feb 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
Hiding in plain sight.

Quote:
There are many forms of malcode concealment, from the “obfuscated beyond recognition” to “in plain sight” yet seldom have we seen hijacking of compiler runtime stubs (although infection of compilers, ala Induc, has already been explored and exploited [1,2,3])

Obfuscation is typically easy to spot (especially when the authors try very hard to make it difficult to analyze) [4] and it is the likely reason why “in plain sight” techniques are starting to make an appearance as discussed by Billy [5].

One variation of such a technique is to hijack a call to a constructor or initialization routine within a compiler-emitted stub and point it at the malcode, with the assumption that most AV engines (and analysts) recognize and skip (or pay less attention to) compiler generated stubs.
Source -
Hiding in plain sight | SophosLabs blog


My System SpecsSystem Spec
.

Reply

 Hiding in plain sight.




Thread Tools





Similar help and support threads
Thread Forum
Hiding in plain sight: a story about a sneaky banking Trojan
Source A Guy
Security News
Windows won't start - No solution in sight
Hello I got a virus or malware the other day. Internet tabs just kept opening indifinetly, and then my computer restarted. On restart, it couldn't load and it did the startup recovery but failed. No useful errors. Just said it could not fix the problem. I tried system restore, which says it...
BSOD Help and Support
Windows 7 loses sight of Xp Pro machines?
I have several Windows 7 machines, current service packs, and dozens of XP Pro machines also with current service packs. All machines are on a domain. Normally, the W7 machines can see shared folders on the XP Pro machines and the XP Pros can see shared folders on the W7 machines. XP Pros can...
Network & Sharing
annoying sight bar in firefox 3.6
whenever i go to lockergnome, cnet, etc........... i get an annoying popup bar on the bottom my browser window. i would like to know if there is any way to keep from getting this.
Browsers & Mail
Second Sight, man this gaming sux
I downloaded the trial from Trymedia then payed for the full version, however it sometimes crashes when loading, like i play 1 level, then on the second level the game crashes, when it crashes the loading bar stops or the CD that means the cutscene is loading never goes away. Help plz this is...
Gaming
Display extends out of sight on right?
I can actually drag a folder or file off the display screen on the right and it will become unseen/lost. The only way to get it back is right click a blank area and drag the imaginary box along the farthest point I think is there and then click cut and then paste it back to the usable screen.....
Graphic Cards

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:31.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App