can you explain the following code of a known malware ? 

 

Thanks 

Read the whole article you copy-pasted this fragment from (https://blog.csdn.net/kendiv/article/details/3078531). There's nothing more to explain, article covers it all.

Quote

Figure 4 shows the packed data section.

Figure 5. Unpacked Code

On 8/7/2018 at 10:29 PM, kao said:

Read the whole article you copy-pasted this fragment from (https://blog.csdn.net/kendiv/article/details/3078531). There's nothing more to explain, article covers it all.

Good article KAO!!

 

Interesting malware but it would work on 32bit windows only. In 64bit win10 will not be able to install the driver so easy and place ssdt hook.