[Vysse]

I used this on VCrypt and never really released it. Most of the important code I cannot take credit on and that will be explained in a second. This method of file pumping is perfect because it won't increase detection it will not cause your file to not be able to run and it shouldn't be effected by compression

First get affixiate's Resource Manager class from this thread.

https://hackforums.net/showthread.php?tid=895758

Then use this function to easily pump files.

Code

Public Sub Pump(ByVal file As String, ByVal size As ULong, ByVal resourceName As String)
      Dim rnd As New Random()
      Dim rndb(size) As Byte
      rnd.NextBytes(rndb)
      Dim resMan As New CResourceManager(file)
      resMan.Write("RCData", resourceName, rndb)
End Sub

As I stated I did nothing but the pumping function which was stupid easy. Thought I would share this so people don't use a bad method to pump files.

[derpin0n]

Well, I looked at this post https://hackforums.net/showthread.php?ti...id38725152

Then yours here https://hackforums.net/showthread.php?ti...id38725222

And then had the same idea to make a pumper like this. Using the native resources method from here:
https://hackforums.net/showthread.php?tid=3622113

We think alike.

[Vysse]

Ya the idea is really simple. You could technically use all 0's but then compression would ruin it.

[LethalNET]

Ya the idea is really simple. You could technically use all 0's but then compression would ruin it.

Nothing really new at all, I was using this around 2 and a half years ago - 3 years ago in VB6.
The concept is nice but if you're using something like that for a crypter or a rat or whatever else it could trigger several AV's to flag it as a Bary because of the resource's.

[Vysse]

Nothing really new at all, I was using this around 2 and a half years ago - 3 years ago in VB6.
The concept is nice but if you're using something like that for a crypter or a rat or whatever else it could trigger several AV's to flag it as a Bary because of the resource's.

I never had that issue but I'd pump the file being crypted and then crypt it. I just didn't like putting bytes at the end of a file.

[LethalNET]

I never had that issue but I'd pump the file being crypted and then crypt it. I just didn't like putting bytes at the end of a file.

It depends what you file the resource with.
And I don't blame you, Adding bytes to the end of a file is a old and over used method of achieving a file pumper.
Doing it this way though is indeed alot more unique in that not as many people know of it and have saturated it.