Welcome to a new lesson in this lesson, we are going to see how to create stealth, the Trojan.
And we are going to take the malware which we created from an earlier lesson when we study process injection.
So the process injection malware, which we created earlier, was designed to inject into Microsoft
Paint and show MessageBox.
So let's try that again.
This smell, that process injection, which I reanimates, know stuff.
And you will know in a while why I call it no stealth.
OK, so now the hell will have to open Microsoft buying program first.
So let's run make this off patent.
The process injection, no stealth, you double click.
And you notice when a double click is a black box opened up.
Then messagebox, use the black window, we should.
He's known as the console.
So that is why it is no still, because when you Reynie, you show us a console, let's straighten retime.
So in order to create a trillion, we hear he stealthy.
We have to make some modification to the source code.
So this is a modified source code over here.
Opening to look back.
Now, in this MORTIFIES law school, we have change, the main function to become women.
Women is a graphical user interface application entry point.
And this is the MSDS documentation for the women application entry point.
So if you want to create any kind of application that runs as a graphical user interface, we use this
signature.
Compare this with the original one, his original one.
If you open it with the note back plus plus, you will see that it is mean, uh, mean.
Functions in nature will run with the console.
He will open up a console.
But Wenman functions in nature, will not open the console.
The other differences you need to come into this printer because he doesn't make sense to print if there
is no console.
So let's try to run this one, though.
Yeah.
One more time.
The processing injection, you can Austell tell and you see the console opens and then it shows the
message box.
Now we run the one we remain in MessageBox shows without showing any console first.
Now you can compile this process injection, the women one using the compost group.
So if you open this compost and look every day, some change changes to subsistent windows.
Previously, it was subsystem console.
So a subsystem console is used to build those fabrication, which has corniness, a main function,
but subsystem windows issues for building those applications, which is convening as a signature.
So this is how you can create a Trojan that is stealthy.
Thank you for watching.