Does anti-debugger work for injected dlls?
Posted: Wed Jul 03, 2024 4:16 pm
I tested today,
1. protect a.dll, get a.vmp.dll, with anti-debugger enabled
2. inject a.vmp.dll into another process B, with CreateRemoteThread(...,&LoadLibrary,...), injection succeed and injected code worked good
3. in visual studio - Debug - attach to process B, everything in debug window looks good and process B do not exit or show a dialog says debugger detected.
Is this a expected behavior?
1. protect a.dll, get a.vmp.dll, with anti-debugger enabled
2. inject a.vmp.dll into another process B, with CreateRemoteThread(...,&LoadLibrary,...), injection succeed and injected code worked good
3. in visual studio - Debug - attach to process B, everything in debug window looks good and process B do not exit or show a dialog says debugger detected.
Is this a expected behavior?