Unprotect Project
  • Search
  • Map
  • Resources
    Technique List Snippet List Detection Rule List
  • About
  • API

Search Evasion Techniques

Names, Techniques, Definitions, Keywords

Random is cool

Search Result

1 item(s) found so far for this keyword.

CloseHandle, NtClose Anti-Debugging

When a process is debugged, calling NtClose or CloseHandle with an invalid handle will generate a STATUS_INVALID_HANDLE exception.

The exception can be cached by an exception handler. If the control is passed to the exception handler, it indicates that a debugger is present.

Made with in 🇫🇷 © 2022. The #UnprotectProject

Disclaimer - EULA - Terms And Conditions

Contribute