Reflective loading.
Achieving stealth by creating processes without any trace.
What is reflective loading reflective loading is where we try to obfuscate executable file by building
it piece by piece dynamically on the fly using a special video call.
In fact, if you have.
So the existence of the file is completely unknown by engines since it is non-existent at the beginning
and only brought in existence dynamically stiffen fuel created, especially because the reflective the
library to turn a normal detail into a reflective gear.
All we need to do is to include different theories like even the library when compiling it, basic concepts
creating processes directly from memory.
We thought that using fonts at AP library directly from memory without using any files on disk, Pato
does not have to resign on disk and can be loaded and live only in memory.
As such, it bypasses any AV engines and scanning files.
Reflected, and that's not registered.
So the operating system and also does not exist in your PB of the target process, steps to create an
effective loader to vision and the one.
You will need to put whatever you want to do into a you have fun and to do, then it's different.
Was library to it and the three combined you have it will be effective.
Yeah, I'm a fall and then year out as a chako into any Trojan.
You may and could be first if you want to add another layer obfuscation.
You know, five a Trojan and the six that were genuine allocate memory and run the refractive dial,
which we then call these reflective refractive loader function to dynamically construct schoolbook fi
executable on the fly and execute.
So basically, these are the six steps you need to go through in order to create in order to create
a reflective glow.
Detroit Thank you for watching.