Tag: process hollowing loader

PichichiH0ll0wer Process hollowing loader written in Nim for PEs only PichichiH0ll0wer has some features to protect your payload. Features Configurable builder Payload encrypted and compressed (and optionally splitted) in the hollow loader Supports splitted injection using multiple processes Supports direct and indirect system calls Hollower does not use the very suspicious call Nt/ZwUnmapViewOfSection Can build…