Mar 19, 2024 06:57 PM
(This post was last modified: Mar 19, 2024 07:14 PM by Hackers.)
12 Working Examples - Unique Run EXE Methods - Native Windows - C
This repo contains 12 total prototypes. Each program loads a local helloworld.exe, in a unique way. This is meant to help you better understand the many ways of running a program in Windows.
- 1) Read .exe file & push binary data to tmp file to run process
- 2) Copy .exe file to new tmp path and run process
- 3) Use original .exe in new process
- 4) Use shell execute to open the .exe
- 5) Copy .exe to new folder, run new file as process, then delete the copied file & the new directory
- 6) Use shell execute to open the .exe in a suspended process, resume the thread to run program
- 7) Schedule a task (schtasks) to run the program at 8:40PM (20:40 military time)
- 8) Use cmd.exe to open the program, from a process
- 9) Create a .vbs file with a simple WScript shell to run our program, ran from system(), with .vbs file removal at end
- 10) Create a registry key that will run our exe from our custom command, then execute the command with cmd /c start
- 11) Create a temporary .bat file that runs an exe
- 12) Use Powershell to start a process to run the exe
What's next?
Once you fully understand each of the 12 methods, you should work on converting your original exe to binary data and loading into a header file. This will let you then work on the next step of saving the binary data to a tmp file so you can use any of the methods here without the original .exe file packaged in with your final program.
What's next for me?
I will probably do another POC thread like this - such as 13 runPE methods that use binary data from a resource or header file.
Disclaimer
This is not a crypter guys and girls. I have a few free crypters you can use if that's what you are looking for. This is just a collection of 12 run .exe methods written in C for beginners to learn more & get started with their own tools.
![[Image: espanakrypt-banner.jpg]](https://i.ibb.co/PGsNLTP/espanakrypt-banner.jpg)
![[Image: Screenshot-2024-03-10-075315.png]](https://i.ibb.co/4Jfc3S4/Screenshot-2024-03-10-075315.png)
This repo contains 12 total prototypes. Each program loads a local helloworld.exe, in a unique way. This is meant to help you better understand the many ways of running a program in Windows.
- 1) Read .exe file & push binary data to tmp file to run process
- 2) Copy .exe file to new tmp path and run process
- 3) Use original .exe in new process
- 4) Use shell execute to open the .exe
- 5) Copy .exe to new folder, run new file as process, then delete the copied file & the new directory
- 6) Use shell execute to open the .exe in a suspended process, resume the thread to run program
- 7) Schedule a task (schtasks) to run the program at 8:40PM (20:40 military time)
- 8) Use cmd.exe to open the program, from a process
- 9) Create a .vbs file with a simple WScript shell to run our program, ran from system(), with .vbs file removal at end
- 10) Create a registry key that will run our exe from our custom command, then execute the command with cmd /c start
- 11) Create a temporary .bat file that runs an exe
- 12) Use Powershell to start a process to run the exe
What's next?
Once you fully understand each of the 12 methods, you should work on converting your original exe to binary data and loading into a header file. This will let you then work on the next step of saving the binary data to a tmp file so you can use any of the methods here without the original .exe file packaged in with your final program.
What's next for me?
I will probably do another POC thread like this - such as 13 runPE methods that use binary data from a resource or header file.
Disclaimer
This is not a crypter guys and girls. I have a few free crypters you can use if that's what you are looking for. This is just a collection of 12 run .exe methods written in C for beginners to learn more & get started with their own tools.
![[Image: espanakrypt-banner.jpg]](https://i.ibb.co/PGsNLTP/espanakrypt-banner.jpg)
![[Image: Screenshot-2024-03-10-075315.png]](https://i.ibb.co/4Jfc3S4/Screenshot-2024-03-10-075315.png)


![[Image: Screenshot-2024-03-19-210457.png]](https://i.ibb.co/mHSQhz8/Screenshot-2024-03-19-210457.png)
