+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] C++ Crypter - making an undetected runpe (/showthread.php?tid=5492724)
C++ Crypter - making an undetected runpe - CoLDarkness - Dec 13, 2016
RunPE is detected as fuck, what do?
I thought about the whole "put runpe in dll then encrypt -> decrypt -> load in memory" route but it was pretty gay so yeah
any other options?
* - stdio - Dec 13, 2016
You need to tell what its been detected as and by what AVs, only then we can guide :)
* - CoLDarkness - Dec 14, 2016
(Dec 13, 2016 02:05 PM)Homi Wrote: You need to tell what its been detected as and by what AVs, only then we can guide :)
Quote:RunPE is detected as fuck, what do?
lil nigga..
anyway i got it [done]
/closed
* - stdio - Dec 14, 2016
(Dec 14, 2016 07:51 AM)CoLDarkness Wrote: lil nigga..
anyway i got it [done]
/closed
Good to hear that, you could contribute by stating how you got the detection removed :)
* - Hoodie+ - Dec 14, 2016
Dynamically link functions used for runpe.
Should not be detected in static analysis.
Runtime is another thing :P
* - CoLDarkness - Dec 15, 2016
(Dec 14, 2016 04:34 PM)Hoodie+ Wrote: Dynamically link functions used for runpe.
Should not be detected in static analysis.
Runtime is another thing :P
For runtime should I just create some gay function to randomly call shit to confuse the AV?
* - Liquir - Dec 15, 2016
(Dec 15, 2016 02:36 PM)CoLDarkness Wrote: For runtime should I just create some gay function to randomly call shit to confuse the AV?
Using the word "gay" as an insult really shows how immature you are.
* - caiveman - Dec 15, 2016
(Dec 15, 2016 02:49 PM)Jaire Wrote: Using the word "gay" as an insult really shows how immature you are.
He's obviously insecure about his programming ability and lack of knowledge. Leave him alone.
Op, to refud your crypter, Google the detections you are getting and change the code so you no longer have those detections.
* - Codefuser - Dec 20, 2016
Boy dis shit is for your botnet? The Node one?