Using DLL’s as a persistence mechanism.
Function Name Hashing
Replacing existing ROR13 function hash names in shellcode to evade signature based detection.
Replacing existing ROR13 function hash names in shellcode to evade signature based detection.