DInvoke

Combining DInvoke with process hollowing to defeat both the AV and the interactive firewall of Avira Internet Security.

A Python staging server plus a C# DInvoke dropper that pulls an RC4-encrypted second stage and lands an undetected session.