Writing Custom Malware: Import Address Table Hooking

jh.live/maldevacademy || Learn to write modern 64-bit Windows malware with Maldev Academy! Save 10% even on the LIFETIME plan with code 'HAMMOND10': jh.live/maldevacademy
Free Cybersecurity Education and Ethical Hacking
🔥KZbin ALGORITHM ➡ Like, Comment, & Subscribe!
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

[@_JohnHammond]

This video had some difficulty while uploading and processing. The audio should be resolved now, make sure your volume is on :)

[@mpakaboy]

honestly, this video is somewhat difficult to understand as well. And this is a programmer that is telling that. I will need to spend some time with google, bing and gpt popped out with this a bit later..

[@jamesisadude9187]

Best coding tutorial. He both explains what he is doing and why.

[@W3b5t3r]

thank you John for your efforts to make informative content everyday

[@lord_snigglebottom]

i may not understand computers as much as the target audience would but i still love these videos so much ❤ computers are great

[@cyphodias1640]

I always love your content! Keep up the great work. 👍

[@_661.]

I love u lessons, master, I take many knowledge with u helping materials and lections, thanks for all ❤

[@djdohboyhtc]

I LOVE the coding video's you do, weather it be python or c++!! Plase do more there great and you explaine them very well!

[@MasterCraft_48]

It's written whether. I make thay mistake more time that I'd like to admit

[@aboveaphid]

⁠@@MasterCraft_48it’s written that. I make typos sometimes too. 😂 lol

[@crr0ww]

you absolute legend. what a fun watch! thunk (hehe) you for posting this, john :')

[@_JohnHammond]

YOU ARE THE BEST CR0W KEEP DOING WHAT YOU DOING 😁

[@sora4222]

Thank you for the education John, I will use this for good (legal) use 😊

[@petrsuchy6386]

43:20 How is it possible to inject dll without Administrator privileges? I don't see UAC prompt popup..

[@michaeldprovenzano9936]

Could you write a signature for the malware you made? It would be cool to know how to.

[@11ph22il]

This video got me HOOKed

[@Angelinajolieshorts]

Great man❤

[@devcognicion]

What about the 1M subs sir, gz! :)

[@JoakimBB]

Is this from maldev academy:)? Good stuff!

[@logiciananimal]

How does the original hook work? I think I remember from a previous video that it is one of those tools that is in arms race with Defender ...

[@nordgaren2358]

Do you mean the CreateFileWOriginal? That is set to the value of the original function pointer by the IAT Hook function, so you can just call it.

[@AGASTRONICS]

Master, please tech BEC, and spoofing ❤

[@ItIsYouAreNotYour]

Do you upload the source code anywhere?

[@SonVan-zh8rj]

Can you make malware bypass antivirus with Autoit ?

[@lss9191]

Awesome, 😊

[@robertommmin5]

Hello John

[@MrGentlemanism]

It's a great video for entertainment purposes. There's a lot of prerequisite knowledge required to be able to understand the video at it's current speed and format.

[@southwestedc]

so glad were getting some more technical content. The beginner simple stuff is great too but its good to get some stuff for students whove already covered much of the basics

[@eavi4645]

No audio

[@JorgeMartinez-xb2ks]

Great job, thank a lot

[@RD-tx9vr]

You forgot to mention the exe compression and obfuscation

[@MrJannikH]

360p only?

[@Mezzosd]

nice😉

[@gambit3570]

hi what version of visual studio are you using is it community edition ?

[@nordgaren2358]

2022 community edition.

[@gambit3570]

thank you @@nordgaren2358

[@rusnuker]

"No bro I'm a white hat I promise"

[@ruycr4ft]

Hey

[@humanxoxo4]

No audio bruh

[@JosephH]

More malaware analysis videos or I start revolting.

[@oluwatosinbamise1539]

I thought I'm the only one not hearing. No audio bro

[@boogieman97]

These arrows are not really pointers, they dereference struct fields. Create video though!

[@nordgaren2358]

Those are pointers. Pointers in C are derefed with `->` and non pointers, like a local structure, is derefed with `.`

[@boogieman97]

@@nordgaren2358 you say it yourself, dereferenced with ->, which mean you get the actual data where the pointer is pointing to. Thats why I said it is not really a pointer it is a dereferenced pointer.

[@nordgaren2358]

@@boogieman97 but it is a pointer. You use that synax on a pointer. The struct could be local and you would have to use a period, because it's not a pointer.

[@jhonwick2590]

John you forgot to activate the windows 😂

[@ulbed]

I guess he can now add the activate windows button to notepad.

[@livestreamvi7991]

Bro please give me the source code please please bro i am a malware lover please give me the source code please ❤❤❤😢😢😢😢😢

[@user-eh1vi3jz1c]

First

[@pizzabossxd]

you greatly deserve the achievement.

[@galaxylord4000]

​@@pizzabossxdAgreed, this man is a diety among us.

[@AGASTRONICS]

Woo, now we are on track teach us master. Then we take over the world 🌍 👿. `laughing evilly`

[@MrRAGHUSHARMA]

second

[@crypto8951]

👾👾👾👾👾👾

[@subhamrai8918]

second 😂

[@footy2024]

Hope you pin me ❤❤❤

[@bp7092]

activate windows frfr

[@nordgaren2358]

You don't know what a VM is?

[@bp7092]

@@nordgaren2358 I do know and use vms yes

[@nordgaren2358]

@@bp7092 So you buy a new key to activate windows on all your VMs?

[@bp7092]

@nordgaren2358 no u don't have to do that

[@nordgaren2358]

​@@bp7092 You do if you want to activate windows.

[@BombadilBeardie]

Free Palestine

[@optic3096]

Paywalling code as part of a tutorial is crazy. Whats happened to this channel smh

[@AlbertGal-uv9qp]

What is this skiddie stuff? You have no idea what are you doing :D

[@marveII0us]

Comments like these always puzzle me. Like how do you know that he doesn't know what he's doing? Not saying this sarcastically but geniunely curious

[@nordgaren2358]

What is skiddie about it?

[@nordgaren2358]

​@@marveII0usjealousy

[@AlbertGal-uv9qp]

@@marveII0us Examining the video closely, it's evident that the individual may be replicating code from tutorials without a comprehensive understanding of the underlying concepts. Don't get me wrong, I genuinely appreciate the video, it offers valuable content. The inclusion of links and tools used to examine the executable files is particularly helpful. :)

[@nordgaren2358]

@@AlbertGal-uv9qp You know people can script videos before they write them out on camera, so that they don't make as many mistakes when on camera, right?

[@karim3741]

@_JohnHammond The video has no audio bro 😅

[@Quran20731]

Free Palestine

[@Samuel-cr9mc]

I thought they both have a truce

[@Mustafa-hw1hy]

​@@Samuel-cr9mcThere is already a ceasefire, but the occupying Israel is still in the Palestinian territories

[@Samuel-cr9mc]

@@Mustafa-hw1hy To me they both deserve to share the land. Israel have theirs same as Palestine. If you think one of them should occupy the whole land then stop this Free stuff it is getting out of hand. Humans should live in peace with one another. And stop using these Free Palestine especially when they've just reach an agreement

[@Mustafa-hw1hy]

@@Samuel-cr9mc Brother, what is happening there is not something that started from October 7th. The state of Israel was not established to live there in peace. It is not possible for Muslims and Jews to live in peace.

[@LittleRainGames]

​​@@Mustafa-hw1hyMaybe all religions should be abolished then, if all they do is stop the peace.