RE: So im working on a process to avoid av with batch 12-15-2019, 04:36 PM
#4
(12-11-2019, 01:15 AM)taylostolo Wrote: So i was thinking you can do a lot with batch and there are not very many viruses out using batch currently to my knowledge as it can get detected easily but what if you make a batch that writes batches have fragments of code in a ton of small batches that are used to make a payload im doing this just to see if it will really work or not so what are your thoughts.
Odds are this won't work. AV works in a few different ways, one of which is by fingerprinting code segments. It doesn't matter where your segments are, or if they're all broken up, it's going to match the signature. This is how your AV can categorize the different detections it gets into common classes, or specific serialized types.

























![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)