You're reading from Malware Development for Ethical Hackers Learn how to develop various types of malware to strengthen cybersecurity

Product type Paperback

Published in Jun 2024

Publisher Packt

ISBN-13 9781801810173

Length 390 pages

Edition 1st Edition

Concepts

Cybersecurity

Author (1):

Mr. Zhassulan Zhussupov

View More author details

Table of Contents (23) Chapters

Preface

1. Part 1: Malware Behavior: Injection, Persistence, and Privilege Escalation Techniques FREE CHAPTER

2. Chapter 1: A Quick Introduction to Malware Development

3. Chapter 2: Exploring Various Malware Injection Attacks

4. Chapter 3: Mastering Malware Persistence Mechanisms

5. Chapter 4: Mastering Privilege Escalation on Compromised Systems

6. Part 2: Evasion Techniques

7. Chapter 5: Anti-Debugging Tricks

8. Chapter 6: Navigating Anti-Virtual Machine Strategies

9. Chapter 7: Strategies for Anti-Disassembly

10. Chapter 8: Navigating the Antivirus Labyrinth – a Game of Cat and Mouse

11. Part 3: Math and Cryptography in Malware

12. Chapter 9: Exploring Hash Algorithms

13. Chapter 10: Simple Ciphers

14. Chapter 11: Unveiling Common Cryptography in Malware

15. Chapter 12: Advanced Math Algorithms and Custom Encoding

16. Part 4: Real-World Malware Examples

17. Chapter 13: Classic Malware Examples

18. Chapter 14: APT and Cybercrime

19. Chapter 15: Malware Source Code Leaks

20. Chapter 16: Ransomware and Modern Threats

21. Index

Why subscribe?

22. Other Books You May Enjoy

Understanding APC injection

In this section, we’ll embark on a journey that unravels the concept of asynchronous procedure call (APC) injection, from its basics to advanced implementation strategies, providing a roadmap to both potential threats and vigilant defenders.

A practical example of APC injection

In the preceding sections, we discussed traditional code injection and traditional DLL injection. I will discuss an early bird APC injection technique in this section. Here, we will examine QueueUserAPC (https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-queueuserapc), which utilizes an APC to queue a particular thread.

Every thread has a separate APC queue. The QueueUserAPC function is invoked by an application to queue an APC to a thread. In the QueueUserAPC call, the contacting thread specifies the address of an APC function. APC queuing is a request for the thread to invoke the APC function.

Initially, our malicious program...