Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C# 

RunPE Crypter

Im using RunPE Crypter source code in C# from Nyan Cat.
Can you tell me any technique to fud obfuscate from the 5/26 that I got from the source code?, I have seen by for example adding junk code + assembly & icon changer + File Pumper.
It's also Native + .NET support right ?
If I choose non cpu it works in x86 + x64?

Thanks!
(Mar 28, 2020 11:30 AM)HashEU Wrote:  Im using RunPE Crypter source code in C# from Nyan Cat.
Can you tell me any technique to fud obfuscate from the 5/26 that I got from the source code?, I have seen by for example adding junk code + assembly & icon changer + File Pumper.

You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.

Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.

(Mar 28, 2020 11:30 AM)HashEU Wrote:  It's also Native + .NET support right ?
If I choose non cpu it works in x86 + x64?

Thanks!

You could ask the developer yourself or you could test it yourself.
(Oct 22, 2020 09:08 PM)maldev009 Wrote:  snyke cannot be trusted. snyke? more like snake. and that snakes name is john armada revesz.
(Mar 28, 2020 03:50 PM)Obistone Wrote:  You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.

Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.


You could ask the developer yourself or you could test it yourself.

Thanks,can I ask you few questions through the Hackforums Conversation?
(Mar 28, 2020 03:52 PM)HashEU Wrote:  Thanks,can I ask you few questions through the Hackforums Conversation?

Sorry about the late reply and yeah sure dude.
(Oct 22, 2020 09:08 PM)maldev009 Wrote:  snyke cannot be trusted. snyke? more like snake. and that snakes name is john armada revesz.
Crypters for managed assemblies seem to have progressed more towards native C/C++ implementations that can load the .NET Framework runtime and load the assembly in a new assembly domain.
[Image: Syr3DlV.png]
(Mar 29, 2020 11:32 AM)gigajew Wrote:  Crypters for managed assemblies seem to have progressed more towards native C/C++ implementations that can load the .NET Framework runtime and load the assembly in a new assembly domain.

Do you have any code for what you just said above?
BTW an a big fan of your work.
[Image: 6xBycLk.gif]


Website: nomorehome.work
(Mar 28, 2020 03:50 PM)Obistone Wrote:  You can do this with obfuscation using something like ConfuserEx, .NET Reactor, Smart Assembly, etc.

Or, you could put the RunPE in a dll, encrypt it, add it as a resource into your project, then decrypt it and invoke the "Run" method at runtime.


You could ask the developer yourself or you could test it yourself.

Any legitimate obfuscator should never be used to remove detections from a binary sample.

If you use an obfuscator to pack your piece of malware, I will send a pack of Raptors to your houseto hunt you down.
https://github.com/Washi1337

"I'll tell you this UDP joke, and I don't care if you will get it or not."
(Apr 3, 2020 08:23 PM)VisualSoft Wrote:  Do you have any code for what you just said above?
BTW an a big fan of your work.

Donut is completely open source on the GitHub platform
[Image: Syr3DlV.png]
I'm also looking for more info if possible? HashEU can I get a pm or your discord to talk more? Arctic#3060 is mine.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by VisualSoftNov 6, 2023 05:12 PM 125 7,611 Nov 6, 2023 05:12 PM
Last Post: Hopsin
[C#] by VentureMar 29, 2021 02:08 PM 8 1,531 Mar 29, 2021 02:08 PM
Last Post: OldHolBorn
[C] by ( ͡° ͜ʖ ͡°)Sep 9, 2019 11:22 PM 42 16,833 Sep 9, 2019 11:22 PM
Last Post: AnonFawkes