View Single Post
  #1  
Old 08-26-2019, 10:34
TomaHawk TomaHawk is offline
Family
 
Join Date: Jan 2014
Posts: 20
Rept. Given: 2
Rept. Rcvd 50 Times in 11 Posts
Thanks Given: 5
Thanks Rcvd at 64 Times in 12 Posts
TomaHawk Reputation: 50
[C++ & MASM Source] - MyAppSecured v1.00 Beta (exe protector)

Many years ago I wrote a software protector called MyAppSecured. Somewhere in the middle of porting it from Delphi to C++ I lost my interest in this project. Just found it on my HDD so I thought it might be helpful for someone.

In short, the GUI of this protector is written in C++ and the protection stub in written in MASM.

The C++ code loads a target in memory and adds 2 PE sections to it. One for the TLS callback code and one for the main code. The MASM stub will be written to those 2 sections.

This protector has just 2 protection features: Analyze Immunity (anti-debug) and Memory Shield (anti debug-tools, OEP relocation).

Note this is not a download-and-use-right-away protector. The code is written years ago so it's not very well written and also for some unknown reason the MASM stub could not be written into the 2 created sections. It did work very well years ago but I don't have the time to investigate why it doesn't work now. To be clear, the compiled exe file you will find in the package should run nicely but once you try to secure a exe file, that exe file is gonna be corrupted.

This project is free for personal and commercial purposes. If you have any questions please ask, but keep in mind I abandoned this project and removed it from my HDD right after posting it here.

Even if you are not gonna use this project it might be interesting to check the code. Some interesting stuff you might find there for your own project, such as emulating the CreateThreadW function in pure MASM, adding PE sections & relocation of OEP.
Attached Images
File Type: png analyze_immunity_2.png (84.3 KB, 22 views)
File Type: png analyze_immunity_1.png (93.0 KB, 17 views)
File Type: png protections.png (73.9 KB, 18 views)
File Type: png start.png (37.5 KB, 18 views)
Attached Files
File Type: zip MyAppSecured v1.00 Beta source.zip (1.86 MB, 48 views)
Reply With Quote
The Following 11 Users Say Thank You to TomaHawk For This Useful Post:
ahmadmansoor (08-26-2019), bolo2002 (08-26-2019), chants (08-26-2019), Fyyre (10-15-2019), Lueilwitz (09-02-2019), Mahmoudnia (08-26-2019), morgot (02-27-2020), mrfearless (09-06-2019), niculaita (08-26-2019), quygia128 (08-27-2019), winndy (08-27-2019)