its been quite a minute since my last article talking about malware development in python, in this article im shifting the focus a bit to C#, .NET Framework in particular
lets have a bit of a background
not a while ago i decided to learn C# to enhance my Windows Targeted Malware Development Capability, so i started reproducing most of the injection and AV bypassing techniques i’ve seen during THM Red Team Path and Sektor7 courses in C#, one technique i really liked is hiding Function calls using dynamic importations and type redefinitions
in C/C++ for example redefining VirtualAlloc would look like this