|
|
|---|---|
|
|
|
|
|
|
|
|
 Morphine（玛啡） Hacker Defender rootkit内核级后门的一部分 PE加密工具 sage ----- Usage: morphine.exe [-q] [-b:ImageBase] [-o:OutputFile] InputFile -q be quiet (no console output) -b:ImageBase specify image base in hexadecimal string (it is rounded up to next 00010000 multiple) -o:OutputFile specify file for output (InputFile will be rewritten if no OutputFile given) Examples: 1) morphine.exe -q c:winntsystem32cmd.exe rewritte cmd.exe in system directory and write no info 2) morphine.exe -b:1F000000 -o:newcmd.exe c:winntsystem32cmd.exe create new file called newcmd.exe based on cmd.exe in system dir set its image base to 0x1F000000 and display info about processing |
|
|
|
|
|
|
|
|
|
