Just in time debugger
Issue #25
resolved
Kindly, i could not run ida scope with any hollowed process opened by just in time debugger
Comments (2)
-
-
- changed status to resolved
See comment
- Log in to comment
Hello,
IDAScope is meant to be used for static analysis of executables. It is not designed to be used during dynamic analysis (debugging). It is recommended to dump the hollowed process, rebuild the import tables, open the sample in IDA and then run IDAScope. You can use Dan's ApiScout to help with the rebuilding of the import table. Happy debugging.
Alex