Project Chameleon

• Discovering a new relocation entry of ARM64X in recent Windows 10 on Arm
• Relock 3.0: Relocation-based obfuscation revisited in Windows 11 on Arm

Author

Koh M. Nakagawa. © FFRI Security, Inc. 2021