Skip to content

Haivilo/executable-encryptor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Exe Encryptor

Function

This is an executable encryptor. It does the following: Compress and encrypt each section. Destroy relocation table and Add another section in the end to recover Relocation Table. Dynamically load IAT with code obfuscation.

Idea

The main idea idea was to : first move the relocation table down, delete the relocation table in PE head, fix the relocation table manually & edit IAT with assembly code obfuscation by self-made assembly code in ollyDbg at the program entry point, so no function name will be shown explicitely in reverse engineering software such as OllyDbg.

Before

Relocation table

Capture

Capture

Section table

Capture4

After

Relocation table

Capture3

Capture3

Section table

Capture5

Capture6

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published