Skip to content

Commit 15c8e78

Browse files
committed
fix: Windows Defender detecting as XenoRAT
1 parent 8fd24fc commit 15c8e78

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

Builder/obfuscation.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,8 @@ def GetRandomFunction() :
6363
body += "\tif (a1 <= (void*)0x00100000) return 0;\n"
6464
body += "\tchar aaa = ((char)((int)'0' + 1));\n"
6565
body += f"\tint bb = {GetRandomNumber()};\n"
66-
body += "\tfor (int i = 0; i < 10; i++) {\n\t\tCreateMutexA(NULL, false, &aaa);\n\t\tbb++;\n\t}\n\treturn bb;\n}"
66+
body += f"\tint r = {GetRandomNumber()};\n"
67+
body += "\tfor (int i = 0; i < bb; i++) {\n\t\tr ^= i;\n\t}\n\treturn bb;\n}"
6768

6869
return body
6970

0 commit comments

Comments
 (0)