Resources
- Techniques
- Heavens gate : https://black-hat-zig.cx330.tw/Advanced-Malware-Techniques/Process-Injection/Heavens-Gate/heavens_gate/#wow64-architecture || https://sachiel-archangel.medium.com/analysis-of-heavens-gate-part-1-62cca0ace6f0 || https://www.bleepingcomputer.com/news/security/malware-loader-goes-through-heavens-gate-to-avoid-detection/ || http://www.rohitab.com/discuss/topic/43044-heavens-gate-with-bypass-load-64-bit-modules-into-32-bit-process/
Tools
- PE-Bear : https://github.com/hasherezade/pe-bear
- ProcessHacker2 : https://processhacker.sourceforge.io/downloads.php
- x64dbg : https://x64dbg.com/