[indetectable]

Hi, I wonder how can a program can copy himself (or just a small part of his code) into a new executable file, and how can I do it with using c#.
I know its possible

[Romeos]

"copy himself into a new executable file". I am not quite sure I understand your question tbh.

[0x9F]

https://docs.microsoft.com/en-us/windows.../pe-format

[indetectable]

"copy himself into a new executable file". I am not quite sure I understand your question tbh.

Okay so I will take an example (not that I want to do but this is the best example I have).

I want to know how can a program (made in c#) can create an executable with some code inside, for example when we use a GUI rat, we have the builder and it can create the executable that we want to spread, so how the builder (wich is inside the program) can create a second .exe file with the code that we want inside ?

[truco]

it depends, if you simply want to create a builder you can use codedom or you can also have a stub (inside resources or w/e) and edit the necessary parts using mono.cecil or dnlib

[Joseph Ducreux]

by binding data to the EOF of an executable and than patching the file image header or something to point to new breakpoint


or simply by using cmd

copy /b a.exe + b.exe = c.exe

if you use extension polygots its possable to differentiate 2 seperate exe's from 1 result if done right

[indetectable]

by binding data to the EOF of an executable and than patching the file image header or something to point to new breakpoint

I dont understand this

or simply by using cmd

copy /b a.exe + b.exe  = c.exe

if you use extension polygots its possable to differentiate 2 seperate exe's from 1 result if done right

This isn't exaclty what I want, to infect a computer the only way I know to do it it's to download another file from web (wich is I think more spoted than just creation another .exe file from nothing (just by clicking on the main program))

[Endorphins]

I dont understand this

or simply by using cmd

copy /b a.exe + b.exe  = c.exe


This isn't exaclty what I want, to infect a computer the only way I know to do it it's to download another file from web (wich is I think more spoted than just creation another .exe file from nothing (just by clicking on the main program))

It is not ethical to infect another machine that you don't own or you don't have permission to access.

Regarding this quote, he is referring to append the additional information (configuration/settings/instructions in this context) to your stub (the executable you just created with the builder). Whenever the stub will get executed/launched, it will read the appended information.

[xHeaven]

It is not ethical to infect another machine that you don't own or you don't have permission to access.

Nobody cares.

[0x9F]

Nobody cares.

law enforcements do 🙃

[xHeaven]

law enforcements do 🙃

Catch me if you can, then, bad boy.
This is still Hackforums, thinking and expecting that users will only infect PCs in their ownership is blatantly retarded and insanely naive.

[Vuln]

If you're going to use C# then just access the compiler through CodeDOM, which is very noob-friendly.

[mose3c]

yeb you can do it by reading self bytes and then use WriteAllBytes to write self to new directory

[JoseCmanXDII]

Catch me if you can, then, bad boy.
This is still Hackforums, thinking and expecting that users will only infect PCs in their ownership is blatantly retarded and insanely naive.

i will catch you.

what a clown

[indetectable]

CodeDOM

https://docs.microsoft.com/en-us/dotnet/...ng-codedom

there is microsofts explanation of it, but I preferred unams as it was easier to read, idfk why
https://github.com/UnamSanctam/UnamDownl...der.cs#L30

For me theses are too complex, sorry..

Code

//here you would use replace on the string, and have anything inside the stub code written out like #thing# to prevent unwanted replacements
template = template.Replace("#thing#", "hello");

I dont understand this part, what should I do with #thing# and hello ??

Thanks