Matrix Posted October 6, 2008 Posted October 6, 2008 Hi My Friends How To Create Virtual Executable File With VB Or VC++ And Run It ? Please Help Me Tnx
What Posted October 6, 2008 Posted October 6, 2008 What exactly are you trying to do? Load a file from resources that can execute?
Matrix Posted October 6, 2008 Author Posted October 6, 2008 What exactly are you trying to do? Load a file from resources that can execute? Hi What No , For Example I Want Decrypt A Hashed File Into Memory And Execute It Without Create Any File In Hard Drive For Decrypting Hashed File May You Help Me Dear ?
Loki Posted October 6, 2008 Posted October 6, 2008 I think you need to understand what you want to do better - What's suggestion sounds exactly what you are trying to do to me
Hikaru Posted October 6, 2008 Posted October 6, 2008 Some friends did a similar thing for Linux/ELF long time ago:http://www.phrack.com/issues.html?issue=63&id=11#articleBasically you need to "emulate" the work done by the PE loader. You can do a full emulation, or maybe you can just hook/attach the loader and replace the LoadImageFromDisk with a LoadImageFromBuffer (metaphorically speaking, of course).Hope it helps.
metr0 Posted October 6, 2008 Posted October 6, 2008 Since this technique is mostly used for malware purposes, I won't give you that many details (assuming you're after that purpose only). Create a second process and unmap it completely, then go on by writing the new data into it and aligning it properly. You'll need to suspend and resume that process, playing around with it's context...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now