fscan工具免杀

fscan被UPX加壳无法直接转shellcode进行loader

下载项目

1	https://github.com/shadow1ng/fscan.git

安装GO

https://golang.google.cn/dl/

garble下载

https://github.com/burrowers/garble go install mvdan.cc/garble@latest

编译

# 普通编译
go build -ldflags="-s -w " -trimpath main.go

# garble编译
garble -literals -tiny -seed=random build -o fn.exe main.go

garble -tiny -literals -seed=random build -ldflags="-w -s -H windowsgui" -race go-sc.go

字符串特征工具

https://github.com/optiv/Mangle

__END__