[0dayleet]

Simple RunPE Stub generator I made.
It generate Stub in Visual Basic 6 for your crypter.
( Please put the folder ' GeneratedStub ' in the same directory as the Stub Generator. All Stub will be created there. )

Screen:
[img]http://img260.imageshack.us/img260/6258/imgstubgenerator.png[/img]

NVT Scan:
[img]http://img175.imageshack.us/img175/702/imgscanstubgenerator.png [/img]

Download:
http://www.mediafire.com/?zjjzjjjqdmz
http://www.#/?d=Q4V1PGR0

[Sternenfuchs]

Well seems nice
and you can use the stubs for which crypters?
(lol sry 4 the question but i am .. well .. not that pro ;D)

[Hallow]

Nice Julie looks great!

[ℜain]

Cool, can you post a virus scan of one of your stubs? :)

[Tech‏nique]

Infected?



<i>File Info</i>

Report date: 2010-03-28 00:32:38 (GMT 1)
File name: <b>Stub_Generator_by_Julie.exe</b>
File size: 237568 bytes
MD5 Hash: 870d35b9b90f663357d39a9b6e2be203
SHA1 Hash: 735f6e1f970e0498d4f97a4e06a7c16190711321
Detection rate: <font color='red'>1</font> on 20 (<font color='red'>5% </font>)
Status: <font color='red'>INFECTED</font>

<i>Detections</i>

a-squared - -
Avast - -
AVG - -
Avira AntiVir - <font color='red'>TR/Dropper.Gen</font>
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

<i>Scan report generated by
<a href="http://novirusthanks.org/"><u>NoVirusThanks.org</u></a></i>

[0dayleet]

Cool, can you post a virus scan of one of your stubs? :)

Sure:


File Info

Report date: 2010-03-28 00:36:31 (GMT 1)
File name: Stub.exe
File size: 334569 bytes
MD5 Hash: 58c32110110b0972c8efb9c917632d68
SHA1 Hash: 040ebdd57472d6dda8c2f1047339ce44b2d6fb2a
Detection rate: 0 on 20 (0%)
Status: CLEAN

Detections

a-squared - -
Avast - -
AVG - -
Avira AntiVir - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org

---

Infected?

Avira AntiVir - TR/Dropper.Gen

Dropper.Gen = It's cause by the little size of the file.
It's not infected.

[deepz]

these stubs for which crypter?? did u tried with any??

[-mothered-]

Oh yeah, a really great tool mate. This Is just what I've been looking for.
A great share Indeed. Keep up the good work :)

[0dayleet]

Oh yeah, a really great tool mate. This Is just what I've been looking for.
A great share Indeed. Keep up the good work :)

Thanks for your comment 🤭

[Max_Mafiotu~]

not fud .. <3

File Info

Report date: 2010-04-05 17:34:37 (GMT 1)
File name: stub.exe
File size: 40960 bytes
MD5 Hash: a02011c275209f652dd42a30d9f1a943
SHA1 Hash: 75c3c634e942c9346e3ba0af32fafe99179d852d
Detection rate: 6 on 18 (33%)
Status: INFECTED

Detections

a-squared - Virus.Win32.Vbinder!IK
Avast - -
AVG - Dropper.VB.3.BS
Avira AntiVir - TR/Dropper.Gen
BitDefender - -
ClamAV - -
Dr.Web - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - Virus.Win32.Vbinder
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - -
NOD32 - Win32/Injector.AQI
Panda - -
TrendMicro - -
VBA32 - -
Zoner - -

Scan report generated by
NoVirusThanks.org

[0ntsnapte]

It doesn't create an exe file in the GeneratedStub folder? Any ideas?

[Draven714]

It doesn't create an exe file in the GeneratedStub folder? Any ideas?

You have to compile it using VB6

EDIT: @Julie: Are you making any modifications to the properties / code before you compile?

[SAD.KHAN]

hmmmmmmm nice prog julie keep it up

[0day exploit]

No offense mate but.... the stub generator is not so good cause :
1.I could decompile the stub very very easy
2.The runpe is detected

[0ntsnapte]

You have to compile it using VB6

EDIT: @Julie: Are you making any modifications to the properties / code before you compile?

Thanks!