Exetools

Exetools (https://forum.exetools.com/index.php)
-   Source Code (https://forum.exetools.com/forumdisplay.php?f=46)
-   -   PE-Packer (https://forum.exetools.com/showthread.php?t=19785)

Zeokat 02-21-2021 22:22

PE-Packer
 
PE-Packer is a simple packer for Windows PE files. The new PE file after packing can obstruct the process of reverse engineering.

Warning
This project is just a demo for beginners to study Windows PE Format and Assembly Language. It still has some compatibility problems and bugs that cannot be used in practice.

How it works:
It will do the following things when packing a PE file:
  • Transforming the original import table.
  • Encrypting sections.
  • Clearing section names.
  • Installing the shell-entry.

When running a packed PE file, the shell-entry will decrypt and load the original program as follows:
  • Decrypting sections.
  • Initializing the original import table.
  • Relocation.


Source:
Code:

https://github.com/czs108/PE-Packer
Credits to original author: Chenzs108


All times are GMT +8. The time now is 20:36.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2021, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX