Only works with specific arguments ?

[Beykir]

Hello,

Im using this loader https://github.com/f1zm0/hades my my "payload.bin" is calc.exe generated with donut.
If im using "Shoggoth.exe --input payload.bin --output output.bin -m raw --dont-do-first-encryption --dont-do-second-encryption"
It will work and i see the calculator, but if i do it without "--dont-do-first-encryption --dont-do-second-encryption" nothing happens.

Win10 Virtual machine latest updates

[Beykir]

Ok i guess it has something to do with the technique used by the hades loader. CreateRemoteThread and QueueUserApc doesnt work with shoggoth

[frkngksl]

Let me check with the register saving part, the problem might be there.