Update 2025-02-04-BazaarLoader.md

cedricg-mirror · web-flow · commit b8098c5db002 · 2025-03-13T03:15:25.000+01:00
diff --git a/_posts/2025-02-04-BazaarLoader.md b/_posts/2025-02-04-BazaarLoader.md
@@ -43,6 +43,11 @@ Analyzed sample contains many protection against runtime analysis / detection :
 
 ---
 
+# Encrypted Resource DLL
+
+[Resource](/docs/BazaarLoader/rsrc.jpg)
+
+
 NTDLL Base Address :
 
 The sample use the fact that PEB->LDR is located whithin NTDLL image to locate its base address : 
