search

Paskowsky / DreamProtectorFree

Simple protector to show how to run a payload without dropping it using RunPE Technique
35 stars 22 forks source link

[Request] EOF feature #1

Open C-Plus-C-Sharp-C opened 7 years ago

C-Plus-C-Sharp-C commented 7 years ago

Hi iv been studying crypter lately and have found yours a great example but have become stuck on figuring out how to add EOF persistence to the crypter.

I was wondering if you could add a basic EOF feature to this crypter as it would help me learn and expand on i see the basics of how its done. @Paskowsky

Paskowsky commented 5 years ago

The standard way of preserving EOF consists of calculating size of image from PE Headers and subtract it to total file size. If result is greater than zero then we have EOF. You can then copy it to the output and use self injection.