+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB.net] RunPE(FUD runtime stub for crypters) (/showthread.php?tid=160933)
[VB.net] RunPE(FUD runtime stub for crypters) - JapaBrz - Oct 8, 2009
I think Deathrader posted something like this a while, but wasn't RunPE and wasn't runtime like this one. It was used on my crypter 2.0 but since the project is closed, here is it. Credits to me[deleted].
and BTW works with ANY unbinded executable, .net or not. But the stub requires .net after.
http://pastebin.com/f63673e6c
* - x3me - Oct 8, 2009
I keep getting these 2 errors:
Warning 1- Variable 'pidh' is used before it has been assigned a value. A null reference exception could result at runtime. Make sure the structure or all the reference members are initialized before use
Warning 2 Variable 'Pinh' is used before it has been assigned a value. A null reference exception could result at runtime. Make sure the structure or all the reference members are initialized before use
Can you help me?
* - JapaBrz - Oct 8, 2009
They aren't errors, are warnings. You can still use compile it with warnings.
* - CindyAngel - Oct 8, 2009
(Oct 8, 2009 06:31 AM)JapaBrz Wrote: I think Deathrader posted something like this a while, but wasn't RunPE and wasn't runtime like this one. It was used on my crypter 2.0 but since the project is closed, here is it. Credits to me and + rep if you liked it.
and BTW works with ANY unbinded executable, .net or not. But the stub requires .net after.
http://pastebin.com/f63673e6c
Hi JapaBrz,
Can you explain me in detail what and how to do?
Please.
Thanks.
* - JapaBrz - Oct 8, 2009
It's a crypter stub code, use it to make a crypter, if you know.
It's FUD and as I said, works with all executables that can be ran by RunPE.
* - Deathader - Oct 9, 2009
I'll check this out when I get home ;)
It uses reflection, correct?
Edit: Holy shit. nice work. Is this tested? :D
* - JapaBrz - Oct 9, 2009
Tested and working with any executable that can be ran in RunPE
Don't use any kind of Reflection, It's all on PE reading and parsing the sections to the memory. I changed only a few steps:
[based on RunPE]
-Remove MoveMemory(don't work with .net)
-Added alot of Math to fix array segments
-added some matrix math calculation for the garbageCollection
* - Soul Collector - Oct 9, 2009
So you giving free FUD RUNTIME source ??? WTF
* - BlueMelon - Oct 9, 2009
(Oct 9, 2009 11:29 AM)Soul Collector Wrote: So you giving free FUD RUNTIME source ??? WTF
You need to know how to use the source id Imagine. Im not at that level yet, I can only make a scan time. So Ill stay away from this for awhile :P
* - Soul Collector - Oct 9, 2009
Yea me too .. :D But okay thnx gonna study this source ..
* - [B]iishop - Oct 9, 2009
I dont get how to use it. Do we create a button or what?Put it on our crypter source? Im a little new to the whole crypting stuff. Im a beginner coder. Sorry =s
* - Phіus - Oct 9, 2009
If you are a beginner I recommend you stay away from this. @Japabrz Nice work, I'll modify this for my own needs.
* - Vorfin - Oct 9, 2009
Already seen on LC, and as I said, WOW! This is the first time I have ever seen this done.
* - Phіus - Oct 9, 2009
(Oct 9, 2009 03:30 PM)Vorfin Wrote: Already seen on LC, and as I said, WOW! This is the first time I have ever seen this done.
I've seen a couple that work in C# but they are not compatable with .NET
* - Vorfin - Oct 9, 2009
Yeah, before this I was under the impression that runtime had not yet been done, at least not publicly. Some guys on Hack.Hound claimed they had done it using a mix of converted VB6 and C# code. However I don't think they ever provided any solid proof.