SCdbg
SCdbg 是一个很适合用于检测shellcode的工具
下载： https://sandsprite.com/blogs/index.php?uid=7&pid=152
scdbg.exe -f shellcode
C:\Users\Administrator\Desktop\VS_LIBEMU-master>scdbg.exe -f test.bin
Loaded 139 bytes from file test.bin
Initialization Complete..
Max Steps: 2000000
Using base offset: 0x401000
4010b4 WinExec( net user jmiller "xxxxx" /add; net localgroup administrators jmiller /add)
4010c0 GetVersion()
4010d3 ExitProcess(0)
Stepcount 554094