VB virus reverse analysis

Insert picture description here
If the VB program has only one form, the execution starts from the load process of the form form 如果有多个窗体则从设计的第一个窗体的Form_Load过程开始执行. Because there is no main process, it is judged Form_Load就是VB应用程序的入口点.
The VB virus program compiled by Native can be debugged using OD.

Guess you like

Origin blog.csdn.net/qq_43312649/article/details/106882742