How can I modify the hook on GetDiskFreeSpaceExW to always return a constant value?

cuckoosandbox / community

Repository of modules and signatures contributed by the community

323 stars 175 forks source link

How can I modify the hook on GetDiskFreeSpaceExW to always return a constant value? #461

Closed d0mnik closed 4 years ago

d0mnik commented 4 years ago

I am trying to configure Cuckoo to counter anti-analysis malware. As such, I need to modify the hook on GetDiskFreeSpaceExW in misc.rst to change the lpTotalNumberOfBytes to something bigger than 100GB.

I can't seem to modify the value despite using the middle and post blocks. Am I missing something?

d0mnik commented 4 years ago

I am sorry, I realized my modified monitor was in the wrong directory