Why is this detected?
Informations
- Makecert / SignTool used
- Visual Studio 2010 used
- Manual Mapping injection used
This simple dllmain is detected. Why?
Why is it detected?
- Makecert / SignTool used
- Visual Studio 2010 used
- Manual Mapping injection used
This simple dllmain is detected. Why?
Code:
#include <windows.h>
BOOL WINAPI DllMain(HMODULE hDll, DWORD reason, LPVOID reserved)
{
if(reason == DLL_PROCESS_ATTACH)
{
MessageBoxA(NULL, "HELLO", "HELLO", NULL);
}
return true;
}
Why is it detected?


![=]](/forum/images/emotions/=].gif)

