Hack Forums
[.NET] [VB.net] RunPE(FUD runtime stub for crypters) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB.net] RunPE(FUD runtime stub for crypters) (/showthread.php?tid=160933)

Pages: Pages 1 2 3 4


* - Icy Wind - Oct 22, 2009

Wow, just wow. This seems awesome, too bad i dont
quite understand it. Oh well, i better start learning more.


* - Xinapse - Nov 10, 2009

can anyone show me how this works? whenever i use this it doesnt run the original exe


* - Soul Collector - Nov 10, 2009

You just copy/past in stub thats all. If you want to work fully you should mod it, adding to be complable with builder and to add to selected .exe


* - -=C0d3ak=- - Nov 11, 2009

(Nov 10, 2009 01:28 PM)Soul Collector Wrote:  You just copy/past in stub thats all. If you want to work fully you should mod it, adding to be complable with builder and to add to selected .exe

Copying and pasting it into your stub source can't possibly make your stub runtime..

I would really like a tutorial on runtime, scantime is just too easy =\


* - newbie223 - Nov 12, 2009

hey any1 mid explaining how do we use this i dun like copy paste i wanna learn :)


* - D3viL - Nov 12, 2009

How To Call The RunPe Classes ?Cant Get It To Work
dim aj as new DD

aj(Blala)?


* - AzCrackZ - Nov 13, 2009

Try
Code
Dim DD as new DD
DD.SRexec(byte_Arry, Victim_Proc)



* - JapaBrz - Nov 13, 2009

yeah and remember that you can pack both array(GzipLib) and the final stub(NETz), you can get a even smaller executable size.


* - AzCrackZ - Nov 13, 2009

I keep getting "unknown executable image" got any ideas?


* - Bob1337 - Nov 15, 2009

Hmmmm is this working for windows xp?
I tested it on vista and it worked but some other people said to me that there is a security error on XP.


* - AzCrackZ - Nov 15, 2009

I cant get it to inject the exe on XP. I tested in sandboxie and after it launches the original exe, it said "unknown executable image" for the process name. No actual error window pops up.


* - dilsin - Nov 16, 2009

i just make it work in vb 6 on my crypter i dunno if its FUD
slow net here
and i'll try your RUN PE
:D
for my dot net crypter


* - AzCrackZ - Nov 18, 2009

Has anyone made any progess implementing this?


* - sunnyyu - Nov 18, 2009

Thanks. The code works great on winxp 32, vista 32, win7 32 on my test but not working in Windows vista and 7 64 bit (UAC disabled and ran as administrator). When I run it, nothing happens, no errors etc.

Is there a way to make it to work on 64 bit windows? thanks


(Oct 8, 2009 06:31 AM)JapaBrz Wrote:  I think Deathrader posted something like this a while, but wasn't RunPE and wasn't runtime like this one. It was used on my crypter 2.0 but since the project is closed, here is it. Credits to me and + rep if you liked it.

and BTW works with ANY unbinded executable, .net or not. But the stub requires .net after.

http://pastebin.com/f63673e6c



* - dilsin - Nov 18, 2009

woah, i'll try it when i have the time
i hope it works :D it going to be usefull
Btw how do i convert the string data to byte() ?
in vb 6 its like strConv(data,vbFromUnicode)
Anyone knows?