A shellcode function to encrypt a running process image when sleeping.
A shellcode function to encrypt a running process image in memory when sleeping.
This is the companion code for my blog post here.
Just run build.sh to compile the C code, extract the .text section as shellcode, and compile it into a test binary called sleep.exe. This will require MinGW (x86_64-w64-mingw32-gcc, x86_64-w64-mingw32-ld, and objcopy) on Linux.