From 4e806dcdaa31e476dd29f5df8f71575504b94dcd Mon Sep 17 00:00:00 2001 From: pe3zx Date: Mon, 27 Nov 2017 22:37:07 +0700 Subject: [PATCH] Add FAME --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 23d46fa..f64fad7 100644 --- a/README.md +++ b/README.md @@ -444,6 +444,10 @@ My curated list of awesome links, resources and tools DAS MALWERK DAS MALWERK - your one stop shop for fresh malware samples + + FAME + FAME Automates Malware Evaluation + hasherezade/libpeconv/runpe RunPE (aka Process Hollowing) is a well known technique allowing to injecting a new PE into a remote processes, imprersonating this process. The given implementation works for PE 32bit as well as 64bit.