Only works with specific arguments ?

frkngksl / Shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor

620 stars 83 forks source link

Only works with specific arguments ? #7

Open Beykir opened 2 months ago

Beykir commented 2 months ago

Hello,

Im using this loader https://github.com/f1zm0/hades my my "payload.bin" is calc.exe generated with donut. If im using "Shoggoth.exe --input payload.bin --output output.bin -m raw --dont-do-first-encryption --dont-do-second-encryption" It will work and i see the calculator, but if i do it without "--dont-do-first-encryption --dont-do-second-encryption" nothing happens.

Win10 Virtual machine latest updates

Beykir commented 2 months ago

Ok i guess it has something to do with the technique used by the hades loader. CreateRemoteThread and QueueUserApc doesnt work with shoggoth

frkngksl commented 2 months ago

Let me check with the register saving part, the problem might be there.