---
id: 6080
title: "Malware development part 3 - anti-debugging"
source_domain: 0xpat.github.io
source_url: "https://0xpat.github.io/Malware_development_part_3/"
published_at: "2020-04-06T00:00:00Z"
tags: ["windows", "red-team", "anti-debugging", "malware-development", "evasion", "peb"]
phying_url: "https://phying.com/item/6080"
lang: en
---

# Malware development part 3 - anti-debugging

## Summary

Part 3 of the malware dev series: detecting debuggers via IsDebuggerPresent, PEB flags, NtQueryInformationProcess artifacts and breakpoint checks—plus tricks to hinder manual analysis.

## Intelligence Metadata

- **Sources:** 0xpat.github.io
- **Published:** 2020-04-06T00:00:00Z
- **Original:** https://0xpat.github.io/Malware_development_part_3/
- **Phying News:** https://phying.com/item/6080