Polymorphic code: Difference between revisions

Content deleted Content added
m Example: Capitalized opcode mneumonic and expanded; removed x86-specific machine code.
m Example: Grammar pickup; corrected spelling of "technique".
Line 60:
The code inside "Encrypted" ("lots of encrypted code") could then search the code between Decryption_Code and CryptoKey and remove all the code that alters the variable C. Before the next time the encryption engine is used, it could input new unnecessary codes that alters C, or even exchange the code in the algorithm for new code that does the same thing. Usually the coder uses a zero key for the first generation of the virus, making it easier for him because with this key the code is not encrypted. He then implements an incremental key algorithm or a random one.
 
OtherAnother polymorphism technictechnique is to autoinject NOP (No Operation) or other opcodes that don't alter the algorithm.
 
== See also ==