+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] RunPE Crypter (/showthread.php?tid=6061014)
RunPE Crypter - HashEU - Mar 28, 2020
Im using RunPE Crypter source code in C# from Nyan Cat.
Can you tell me any technique to fud obfuscate from the 5/26 that I got from the source code?, I have seen by for example adding junk code + assembly & icon changer + File Pumper.
It's also Native + .NET support right ?
If I choose non cpu it works in x86 + x64?
Thanks!
RE: RunPE Crypter - Obistone - Mar 28, 2020
(Mar 28, 2020 11:30 AM)HashEU Wrote: Im using RunPE Crypter source code in C# from Nyan Cat.
Can you tell me any technique to fud obfuscate from the 5/26 that I got from the source code?, I have seen by for example adding junk code + assembly & icon changer + File Pumper.
You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.
Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.
(Mar 28, 2020 11:30 AM)HashEU Wrote: It's also Native + .NET support right ?
If I choose non cpu it works in x86 + x64?
Thanks!
You could ask the developer yourself or you could test it yourself.
RE: RunPE Crypter - HashEU - Mar 28, 2020
(Mar 28, 2020 03:50 PM)Obistone Wrote: You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.
Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.
You could ask the developer yourself or you could test it yourself.
Thanks,can I ask you few questions through the Hackforums Conversation?
RE: RunPE Crypter - Obistone - Mar 28, 2020
(Mar 28, 2020 03:52 PM)HashEU Wrote: Thanks,can I ask you few questions through the Hackforums Conversation?
Sorry about the late reply and yeah sure dude.
RE: RunPE Crypter - gigajew - Mar 29, 2020
Crypters for managed assemblies seem to have progressed more towards native C/C++ implementations that can load the .NET Framework runtime and load the assembly in a new assembly domain.
RE: RunPE Crypter - VisualSoft - Apr 3, 2020
(Mar 29, 2020 11:32 AM)gigajew Wrote: Crypters for managed assemblies seem to have progressed more towards native C/C++ implementations that can load the .NET Framework runtime and load the assembly in a new assembly domain.
Do you have any code for what you just said above?
BTW an a big fan of your work.
RE: RunPE Crypter - Washi - Apr 4, 2020
(Mar 28, 2020 03:50 PM)Obistone Wrote: You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.
Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.
You could ask the developer yourself or you could test it yourself.
Any legitimate obfuscator should never be used to remove detections from a binary sample.
If you use an obfuscator to pack your piece of malware, I will send a pack of Raptors to your houseto hunt you down.
RE: RunPE Crypter - gigajew - Apr 7, 2020
(Apr 3, 2020 08:23 PM)VisualSoft Wrote: Do you have any code for what you just said above?
BTW an a big fan of your work.
Donut is completely open source on the GitHub platform
RE: RunPE Crypter - ArcticSlay - Apr 7, 2020
I'm also looking for more info if possible? HashEU can I get a pm or your discord to talk more? Arctic#3060 is mine.