2.0.720
This commit is contained in:
vxunderground 2023-03-30 22:21:43 -05:00
parent 95e23595d8
commit 1fe2e4342d
4 changed files with 28 additions and 28 deletions

View File

@ -3,7 +3,7 @@ managed by [vx-underground](https://vx-underground.org) | follow us on [Twitter]
# VX-API
Version: 2.0.717
Version: 2.0.720
Developer: smelly__vx

View File

@ -1,6 +1,6 @@
#include "Win32Helper.h"
BOOL CreateProcessFromPcwUtilW(LPCWSTR PathToBinary)
BOOL CreateProcessFromPcwUtilW(_In_ LPCWSTR PathToBinary)
{
typedef VOID(WINAPI* LAUNCHAPPLICATIONW)(HWND, HINSTANCE, LPCWSTR);
LAUNCHAPPLICATIONW LaunchApplicationW = NULL;
@ -27,7 +27,7 @@ EXIT_ROUTINE:
return bFlag;
}
BOOL CreateProcessFromPcwUtilA(LPCSTR PathToBinary)
BOOL CreateProcessFromPcwUtilA(_In_ LPCSTR PathToBinary)
{
typedef VOID(WINAPI* LAUNCHAPPLICATIONW)(HWND, HINSTANCE, LPCWSTR);
LAUNCHAPPLICATIONW LaunchApplicationW = NULL;

View File

@ -1,6 +1,6 @@
#include "Win32Helper.h"
HANDLE IeCreateFileW(LPCWSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDisposition, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile)
HANDLE IeCreateFileW(_In_ LPCWSTR lpFileName, _In_ DWORD dwDesiredAccess, _In_ DWORD dwShareMode, _In_opt_ LPSECURITY_ATTRIBUTES lpSecurityAttributes, _In_ DWORD dwCreationDisposition, _In_ DWORD dwFlagsAndAttributes, _In_opt_ HANDLE hTemplateFile)
{
typedef HANDLE(WINAPI* IECREATEFILE)(LPCWSTR, DWORD, DWORD, LPSECURITY_ATTRIBUTES, DWORD, DWORD, HANDLE);
IECREATEFILE IeCreateFile = NULL;
@ -12,7 +12,7 @@ HANDLE IeCreateFileW(LPCWSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMod
return IeCreateFile(lpFileName, dwDesiredAccess, dwShareMode, lpSecurityAttributes, dwCreationDisposition, dwFlagsAndAttributes, hTemplateFile);
}
HANDLE IeCreateFileA(LPCSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDisposition, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile)
HANDLE IeCreateFileA(_In_ LPCSTR lpFileName, _In_ DWORD dwDesiredAccess, _In_ DWORD dwShareMode, _In_opt_ LPSECURITY_ATTRIBUTES lpSecurityAttributes, _In_ DWORD dwCreationDisposition, _In_ DWORD dwFlagsAndAttributes, _In_opt_ HANDLE hTemplateFile)
{
typedef HANDLE(WINAPI* IECREATEFILE)(LPCWSTR, DWORD, DWORD, LPSECURITY_ATTRIBUTES, DWORD, DWORD, HANDLE);
IECREATEFILE IeCreateFile = NULL;

View File

@ -337,27 +337,27 @@ DWORD CreateProcessByWindowsRHotKeyW(_In_ PWCHAR FullPathToBinary);
DWORD CreateProcessByWindowsRHotKeyA(_In_ PCHAR FullPathToBinary);
DWORD CreateProcessByWindowsRHotKeyExW(_In_ PWCHAR FullPathToBinary);
DWORD CreateProcessByWindowsRHotKeyExA(_In_ PCHAR FullPathToBinary);
BOOL CreateProcessFromINFSectionInstallStringNoCabW(LPCWSTR PathToInfFile, LPCWSTR NameOfSection);
BOOL CreateProcessFromINFSectionInstallStringNoCabA(LPCSTR PathToInfFile, LPCSTR NameOfSection);
BOOL CreateProcessFromINFSetupCommandW(LPCWSTR PathToInfFile, LPCWSTR NameOfSection);
BOOL CreateProcessFromINFSetupCommandA(LPCSTR PathToInfFile, LPCSTR NameOfSection);
BOOL CreateProcessFromPcwUtilW(LPCWSTR PathToBinary);
BOOL CreateProcessFromPcwUtilA(LPCSTR PathToBinary);
BOOL CreateProcessFromINFSectionInstallStringNoCab2A(LPCSTR PathToInfFile, LPCSTR NameOfSection);
BOOL CreateProcessFromINFSectionInstallStringNoCab2W(LPCWSTR PathToInfFile, LPCWSTR NameOfSection);
BOOL CreateProcessFromIeFrameOpenUrlW(LPCWSTR PathToUrlFile);
BOOL CreateProcessFromIeFrameOpenUrlA(LPCSTR PathToUrlFile);
BOOL CreateProcessFromShdocVwOpenUrlW(LPCWSTR PathToUrlFile);
BOOL CreateProcessFromShdocVwOpenUrlA(LPCSTR PathToUrlFile);
BOOL CreateProcessFromShell32ShellExecRunW(LPCWSTR PathToFile);
BOOL CreateProcessFromShell32ShellExecRunA(LPCSTR PathToFile);
BOOL CreateProcessFromUrlOpenUrlW(LPCWSTR PathToUrlFile);
BOOL CreateProcessFromUrlOpenUrlA(LPCSTR PathToUrlFile);
BOOL CreateProcessFromUrlFileProtocolHandlerW(LPCWSTR PathToUrlFile);
BOOL CreateProcessFromUrlFileProtocolHandlerA(LPCSTR PathToUrlFile);
BOOL CreateProcessFromZipfldrRouteCallW(LPCWSTR PathToFile);
BOOL CreateProcessFromZipfldrRouteCallA(LPCSTR PathToFile);
BOOL CreateProcessFromMsHTMLW(LPCWSTR MshtaCommand);
BOOL CreateProcessFromINFSectionInstallStringNoCabW(_In_ LPCWSTR PathToInfFile, _In_ LPCWSTR NameOfSection);
BOOL CreateProcessFromINFSectionInstallStringNoCabA(_In_ LPCSTR PathToInfFile, _In_ LPCSTR NameOfSection);
BOOL CreateProcessFromINFSetupCommandW(_In_ LPCWSTR PathToInfFile, _In_ LPCWSTR NameOfSection);
BOOL CreateProcessFromINFSetupCommandA(_In_ LPCSTR PathToInfFile, _In_ LPCSTR NameOfSection);
BOOL CreateProcessFromPcwUtilW(_In_ LPCWSTR PathToBinary);
BOOL CreateProcessFromPcwUtilA(_In_ LPCSTR PathToBinary);
BOOL CreateProcessFromINFSectionInstallStringNoCab2A(_In_ LPCSTR PathToInfFile, _In_ LPCSTR NameOfSection);
BOOL CreateProcessFromINFSectionInstallStringNoCab2W(_In_ LPCWSTR PathToInfFile, _In_ LPCWSTR NameOfSection);
BOOL CreateProcessFromIeFrameOpenUrlW(_In_ LPCWSTR PathToUrlFile);
BOOL CreateProcessFromIeFrameOpenUrlA(_In_ LPCSTR PathToUrlFile);
BOOL CreateProcessFromShdocVwOpenUrlW(_In_ LPCWSTR PathToUrlFile);
BOOL CreateProcessFromShdocVwOpenUrlA(_In_ LPCSTR PathToUrlFile);
BOOL CreateProcessFromShell32ShellExecRunW(_In_ LPCWSTR PathToFile);
BOOL CreateProcessFromShell32ShellExecRunA(_In_ LPCSTR PathToFile);
BOOL CreateProcessFromUrlOpenUrlW(_In_ LPCWSTR PathToUrlFile);
BOOL CreateProcessFromUrlOpenUrlA(_In_ LPCSTR PathToUrlFile);
BOOL CreateProcessFromUrlFileProtocolHandlerW(_In_ LPCWSTR PathToUrlFile);
BOOL CreateProcessFromUrlFileProtocolHandlerA(_In_ LPCSTR PathToUrlFile);
BOOL CreateProcessFromZipfldrRouteCallW(_In_ LPCWSTR PathToFile);
BOOL CreateProcessFromZipfldrRouteCallA(_In_ LPCSTR PathToFile);
BOOL CreateProcessFromMsHTMLW(_In_ LPCWSTR MshtaCommand);
DWORD MpfExecute64bitPeBinaryInMemoryFromByteArrayNoReloc(_In_ PBYTE BinaryImage);
BOOL CreateProcessWithCfGuardW(_Inout_ PPROCESS_INFORMATION Pi, _In_ PWCHAR Path);
BOOL CreateProcessWithCfGuardA(_Inout_ PPROCESS_INFORMATION Pi, _In_ PCHAR Path);
@ -376,8 +376,8 @@ BOOL MpfProcessInjectionViaProcessReflection(_In_ PBYTE Shellcode, _In_ DWORD dw
/*******************************************
PROXIED FUNCTIONS
*******************************************/
HANDLE IeCreateFileW(LPCWSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDisposition, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile);
HANDLE IeCreateFileA(LPCSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDisposition, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile);
HANDLE IeCreateFileW(_In_ LPCWSTR lpFileName, _In_ DWORD dwDesiredAccess, _In_ DWORD dwShareMode, _In_opt_ LPSECURITY_ATTRIBUTES lpSecurityAttributes, _In_ DWORD dwCreationDisposition, _In_ DWORD dwFlagsAndAttributes, _In_opt_ HANDLE hTemplateFile);
HANDLE IeCreateFileA(_In_ LPCSTR lpFileName, _In_ DWORD dwDesiredAccess, _In_ DWORD dwShareMode, _In_opt_ LPSECURITY_ATTRIBUTES lpSecurityAttributes, _In_ DWORD dwCreationDisposition, _In_ DWORD dwFlagsAndAttributes, _In_opt_ HANDLE hTemplateFile);
BOOL DeleteDirectoryAndSubDataViaDelNodeW(LPCWSTR FullPathToDirectory);
BOOL DeleteDirectoryAndSubDataViaDelNodeA(LPCSTR FullPathToDirectory);
BOOL CopyFileViaSetupCopyFileW(LPCWSTR Source, LPCWSTR Destination);