v0.3.8
FEATURE
- New options for shellcode detection (
/shellc
):- detect by patterns (previous mode): available with
/shellc P
- detect by stats (new mode): available with
/shellc S
- possibility to mix both modes: options
/shellc B
(both) or/shellc A
(any)
- detect by patterns (previous mode): available with
- Detection of obfuscated memory regions (
/obfusc
) - Caching of detected shellcodes (guarantee that the dumped shellcode is the same as detected shellcode - no second read)
See also: HollowsHunter v0.3.8 & MalUnpack v0.9.8 with the latest PE-sieve