| 60 | |
| 61 | |
| 62 | def test_common(): |
| 63 | print("Testing: COMMON procexp64.exe, alloc_rw_rwx, PayloadLocation.DATA, BackdoorFunc") |
| 64 | |
| 65 | settings = Settings("unittest") |
| 66 | settings.injectable_base = "procexp64.exe" |
| 67 | settings.payload_base = "createfile.bin" |
| 68 | settings.payload_location = PayloadLocation.DATA |
| 69 | settings.carrier_name = "alloc_rw_rwx" # important (not rx) |
| 70 | settings.carrier_invoke_style = CarrierInvokeStyle.BackdoorFunc |
| 71 | |
| 72 | settings.verify = True |
| 73 | settings.try_start_final_infected_exe = False |
| 74 | settings.cleanup_files_on_exit = False |
| 75 | |
| 76 | print("Test COMMON 1/6: plain") |
| 77 | settings.decoder_style = "plain" |
| 78 | if not start(settings): |
| 79 | return |
| 80 | |
| 81 | print("Test COMMON 2/6: xor_1") |
| 82 | settings.decoder_style = "xor_1" |
| 83 | if not start(settings): |
| 84 | return |
| 85 | |
| 86 | print("Test COMMON 3/6: xor_2") |
| 87 | settings.decoder_style = "xor_2" |
| 88 | if not start(settings): |
| 89 | return |
| 90 | |
| 91 | print("Test COMMON 4/6: +guardrail env") |
| 92 | settings.plugin_guardrail = "env" |
| 93 | settings.plugin_guardrail_data_key = "VCIDEInstallDir" |
| 94 | settings.plugin_guardrail_data_value = "Community" |
| 95 | if not start(settings): |
| 96 | return |
| 97 | |
| 98 | print("Test COMMON 5/6: +sirallocalot ") |
| 99 | settings.plugin_antiemulation = "sirallocalot" |
| 100 | if not start(settings): |
| 101 | return |
| 102 | |
| 103 | print("Test COMMON 6/6: +virtualprotect undersized") |
| 104 | settings.plugin_virtualprotect = "undersized" |
| 105 | if not start(settings): |
| 106 | return |
| 107 | |
| 108 | |
| 109 | def test_exe_data(): |