Unprotect
(Delphi Snippet) IsDebugged Flag
New code snippet that demonstrate how malware control the Debug
flag from a running process PEB (Process Environment Block) in order to detect the presence of a debugger.
2 years, 9 months ago