Parsi Coders
Generically Detecting Sandbox’s - نسخه قابل چاپ

+- Parsi Coders (http://parsicoders.com)
+-- انجمن: Cracking / Anti Crack (http://parsicoders.com/forumdisplay.php?fid=75)
+--- انجمن: Anti Debug (http://parsicoders.com/forumdisplay.php?fid=76)
+--- موضوع: Generically Detecting Sandbox’s (/showthread.php?tid=1043)



Generically Detecting Sandbox’s - Amin_Mansouri - 10-15-2011

کد:
bool IsSandBox()
{
   unsigned char bBuffer;
   unsigned long aCreateProcess = (unsigned long)GetProcAddress(GetModuleHandle("KERNEL32.dll"),"CreateProcessA");

   ReadProcessMemory(GetCurrentProcess(),(void *)aCreateProcess, &bBuffer,1,0);

   if(bBuffer == 0xE9)
       return true;
   else
       return false;
}