[Release]DNDetector

[NOP 5]

 

This tool can be used to detect any app compiled with dotnet framework during runtime even if it was packed.

As said in the vid , Most of the packers/obfuscators just adds your PE to their stub and executes in memoy . It's pretty easy to unpack most of them if you know what you are doing.

 

Credits :

me

ollydbg for letting me know about mscoree

 

Link : http://forum.ghbsys.net/index.php?/files/file/2192-dndetector/

Scan : http://www.virustotal.com/file-scan/report.html?id=6648ce56363d648d4b498a0315797085257d66230f95e50f4d150df025736c4d-1321632923

[pinkpuncher 0]

Very Cool