search

KooroshRZ / Evader

Packer (actually a crypter) for antivirus evasion implemented for windows PE files (BSc-Thesis)
103 stars 27 forks source link

[BUG] Run PE infinite loop, payload not executing #3

Open evilsh3ll opened 1 year ago

evilsh3ll commented 1 year ago

Hello, I use windows 10, this is my input Packer.exe C:\Users\main\Desktop\bind\ C:\Users\main\Desktop\crypted.exe 7 65 90 and 0 (Run PE) as execution option, the problem is that the payload is executed infinite times but none of them spawns the program I crypted (I tried a lot of standalone executables, none of them is spawned). image I tested all methods, there isn't a single one (0-5) that can execute the payload (using as target process svchost.exe or explorer.exe), I don't why. I compiled the project as x64bit Release. image There is also a bug in the extension name of the output file.

KooroshRZ commented 11 months ago

Hello there thanks for submitting the issue and sorry about being late in case of answering TBH the RunPE method just works for 32-bit programs And about other methods, I should add this note that those are just for DLL files, not executable PE files. The only method for exe files is the RunPE method which just works for 32-bit programs.