Jul 1, 2015 11:17 AM
(This post was last modified: Jul 7, 2015 12:13 PM by ❤️Fetz❤️.)
Prerequisites:
ResHacker - http://www.angusj.com/resourcehacker/
RAT/Keylogger/File Stub
Tutorial:
Step One:
Once ResHacker has been installed, open it up.
Hit File -> Open, and choose the file you want to be forced to run as admin.
Depending on your version of ResHacker, it should look like this:
Spoiler (Click to View)
Step Two:
Next we are going to need to add a Manifest. Go ahead and hit this button:
Spoiler (Click to View)
From the dropdown choose "MANIFEST" then hit "Add Resource"
Step Three:
Scroll to the bottom of the new resource and before "</assembly>" add this:
Note: Some crypters add the Manifest, so you can just edit the one already added by the crypter instead of adding one.
Step Four:
Hit the green arrow to add the Manifest to the .exe and then save the file. All done!
Edit:
ResHacker - http://www.angusj.com/resourcehacker/
RAT/Keylogger/File Stub
Tutorial:
Step One:
Once ResHacker has been installed, open it up.
Hit File -> Open, and choose the file you want to be forced to run as admin.
Depending on your version of ResHacker, it should look like this:
Spoiler (Click to View)
Step Two:
Next we are going to need to add a Manifest. Go ahead and hit this button:
Spoiler (Click to View)
From the dropdown choose "MANIFEST" then hit "Add Resource"
Step Three:
Scroll to the bottom of the new resource and before "</assembly>" add this:
Code
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="requireAdministrator"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>Note: Some crypters add the Manifest, so you can just edit the one already added by the crypter instead of adding one.
Step Four:
Hit the green arrow to add the Manifest to the .exe and then save the file. All done!
Edit:
(Jul 7, 2015 12:12 PM)FractumSeraph Wrote: Replace "requireAdministrator" with "highestAvailable".
If the user is an admin, it will ask for admin rights. If the user is not, it will run normally.

![[Image: SbxFbo4.png]](https://i.imgur.com/SbxFbo4.png)
![[Image: s9sCzCl.png]](https://i.imgur.com/s9sCzCl.png)


![[Image: 6r1GRmb.gif]](https://i.imgur.com/6r1GRmb.gif)
![[Image: otioqRQ.png]](https://i.imgur.com/otioqRQ.png)