Hack Forums
PE Cloner[Free PE Resource Manipulator] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: PE Cloner[Free PE Resource Manipulator] (/showthread.php?tid=5192689)

Pages: Pages 1 2 3

PE Cloner[Free PE Resource Manipulator] - ng-Coder - Mar 4, 2016

PEC is a free PE Resource Manipulator coded by me.

Coded in C++, any bug report is welcome.

[Image: nnF8VKS.jpg]


MD5: EEFBCDEFF2FCD0DB310F6578AAB625FB
SHA-1: EB4C50890AB7E431731449838AA07754BB08282D

https://www.sendspace.com/file/1346k0
Direct: https://fs02n5.sendspace.com/dl/03bc770e04568e3534707d4c406b00d7/56d9d98f3bd528cf/1346k0/PECloner.zip

https://www.virustotal.com/en/file/d1d8293a70be0efdbce74a507387e5094982ea19701dad2c806996bccd668619/analysis/1457156979/

.

* - gizmodo - Mar 5, 2016

What is this can you explain please?

* - ng-Coder - Mar 5, 2016

(Mar 5, 2016 05:12 AM)gizmodo Wrote:  What is this can you explain please?

Have you heard of a tool called resource hacker?

Anyway in simple term this is a PE resource manipulator
Features:
Icon changer
Info changer
Certificate changer
File size Cloner
Extension spoofer.


.

* - Iterator - Mar 5, 2016

Thanks great tool works fine

* - Hopsin - Mar 5, 2016

This may come in handy for some people. Thanks, much appreciated!

* - ng-Coder - Mar 5, 2016

(Mar 5, 2016 06:33 AM)m__m Wrote:  Thanks great tool works fine
You're welcome.

(Mar 5, 2016 07:05 AM)Hopsin Wrote:  This may come in handy for some people. Thanks, much appreciated!
Thanks pal.


.

* - GanGBanGeR - Mar 5, 2016

no x64 file support :( but the system is x86(32bit) and the file also(virtual machine):
"%windir%/explorer.exe"

* - ng-Coder - Mar 5, 2016

(Mar 5, 2016 02:30 PM)GanGBanGeR Wrote:  no x64 file support :( but the system is x86(32bit) and the file also(virtual machine):
"%windir%/explorer.exe"

Issue could be you running x64 VM, check the file at %windir%/explorer.exe on your VMware it should be x64 executable.

* - GanGBanGeR - Mar 6, 2016

(Mar 5, 2016 11:33 PM)ng-Coder Wrote:  Issue could be you running x64 VM, check the file at %windir%/explorer.exe on your VMware it should be x64 executable.

oh ye its x64 my mistake...

* - ng-Coder - Mar 8, 2016

(Mar 6, 2016 05:20 AM)GanGBanGeR Wrote:  oh ye its x64 my mistake...

ok, if icon is only what you need from the x64 file then you can dump the icon first and use it with pec.

* - Insane Developer - Mar 8, 2016

If I clone the certificate, the certificate will be detected as invalid right?

* - ng-Coder - Mar 8, 2016

(Mar 8, 2016 03:51 AM)Insane Developer Wrote:  If I clone the certificate, the certificate will be detected as invalid right?

Yes ofcurse the Certificate hash won't match when computed, but viewing the file will show the file has legit certificate.

* - qoble - Mar 9, 2016

(Mar 4, 2016 10:51 PM)ng-Coder Wrote:  PEC is a free PE Resource Manipulator coded by me.

Coded in C++, any bug report is welcome.

[Image: nnF8VKS.jpg]


MD5: EEFBCDEFF2FCD0DB310F6578AAB625FB
SHA-1: EB4C50890AB7E431731449838AA07754BB08282D

https://www.sendspace.com/file/1346k0
Direct: https://fs02n5.sendspace.com/dl/03bc770e04568e3534707d4c406b00d7/56d9d98f3bd528cf/1346k0/PECloner.zip

https://www.virustotal.com/en/file/d1d8293a70be0efdbce74a507387e5094982ea19701dad2c806996bccd668619/analysis/1457156979/

.

Did you code this? i think i have seen this on hackhound.org

* - ng-Coder - Mar 9, 2016

(Mar 9, 2016 05:43 AM)qoble Wrote:  Did you code this? i think i have seen this on hackhound.org

🙂 sheared on HH by who? by me 😝

* - Insane Developer - Mar 9, 2016

(Mar 9, 2016 06:12 AM)ng-Coder Wrote:  🙂 sheared on HH by who? by me 😝

Sadly HH is closed down. 😭