Windows C++ / CloseHandle, NtClose
Author | External |
Platform | Windows |
Language | C++ |
Technique | CloseHandle, NtClose |
Description:
Original source code is available here: https://anti-debug.checkpoint.com/techniques/object-handles.html#closehandle
Code
bool Check()
{
__try
{
CloseHandle((HANDLE)0xDEADBEEF);
return false;
}
__except (EXCEPTION_INVALID_HANDLE == GetExceptionCode()
? EXCEPTION_EXECUTE_HANDLER
: EXCEPTION_CONTINUE_SEARCH)
{
return true;
}
}
Created
June 22, 2022
Last Revised
April 22, 2024