Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-26-2019, 10:34
TomaHawk TomaHawk is offline
Family
 
Join Date: Jan 2014
Posts: 20
Rept. Given: 2
Rept. Rcvd 50 Times in 11 Posts
Thanks Given: 5
Thanks Rcvd at 56 Times in 12 Posts
TomaHawk Reputation: 50
[C++ & MASM Source] - MyAppSecured v1.00 Beta (exe protector)

Many years ago I wrote a software protector called MyAppSecured. Somewhere in the middle of porting it from Delphi to C++ I lost my interest in this project. Just found it on my HDD so I thought it might be helpful for someone.

In short, the GUI of this protector is written in C++ and the protection stub in written in MASM.

The C++ code loads a target in memory and adds 2 PE sections to it. One for the TLS callback code and one for the main code. The MASM stub will be written to those 2 sections.

This protector has just 2 protection features: Analyze Immunity (anti-debug) and Memory Shield (anti debug-tools, OEP relocation).

Note this is not a download-and-use-right-away protector. The code is written years ago so it's not very well written and also for some unknown reason the MASM stub could not be written into the 2 created sections. It did work very well years ago but I don't have the time to investigate why it doesn't work now. To be clear, the compiled exe file you will find in the package should run nicely but once you try to secure a exe file, that exe file is gonna be corrupted.

This project is free for personal and commercial purposes. If you have any questions please ask, but keep in mind I abandoned this project and removed it from my HDD right after posting it here.

Even if you are not gonna use this project it might be interesting to check the code. Some interesting stuff you might find there for your own project, such as emulating the CreateThreadW function in pure MASM, adding PE sections & relocation of OEP.
Attached Images
File Type: png analyze_immunity_2.png (84.3 KB, 17 views)
File Type: png analyze_immunity_1.png (93.0 KB, 13 views)
File Type: png protections.png (73.9 KB, 13 views)
File Type: png start.png (37.5 KB, 14 views)
Attached Files
File Type: zip MyAppSecured v1.00 Beta source.zip (1.86 MB, 37 views)
Reply With Quote
The Following 10 Users Say Thank You to TomaHawk For This Useful Post:
ahmadmansoor (08-26-2019), bolo2002 (08-26-2019), chants (08-26-2019), Fyyre (10-15-2019), Lueilwitz (09-02-2019), Mahmoudnia (08-26-2019), mrfearless (09-06-2019), niculaita (08-26-2019), quygia128 (08-27-2019), winndy (08-27-2019)
  #2  
Old 08-31-2019, 16:10
DavidXanatos DavidXanatos is offline
Friend
 
Join Date: Jun 2018
Posts: 64
Rept. Given: 0
Rept. Rcvd 13 Times in 8 Posts
Thanks Given: 21
Thanks Rcvd at 130 Times in 43 Posts
DavidXanatos Reputation: 13
Sounds interesting, unfortunately i cant download attachments yet,
so could you upload it to a locations everyone can download it pelase?
Reply With Quote
The Following User Says Thank You to DavidXanatos For This Useful Post:
Lueilwitz (09-02-2019)
  #3  
Old 09-08-2019, 14:07
JMP-JECXZ JMP-JECXZ is offline
Friend
 
Join Date: Mar 2017
Posts: 15
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 4
Thanks Rcvd at 16 Times in 8 Posts
JMP-JECXZ Reputation: 0
mirror
Code:
https://www.upload.ee/files/10455920/MyAppSecured_v1.00_Beta_source.zip.html
Reply With Quote
The Following 2 Users Say Thank You to JMP-JECXZ For This Useful Post:
DavidXanatos (09-08-2019), Pansemuckl (09-10-2019)
Reply

Tags
c++, dll protector, exe protector, masm, myappsecured

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
[MASM Source] - ZwCreateThread example (winAPI CreateThread emulation) TomaHawk Source Code 4 09-08-2019 14:06
All Packer | Protector Source Mahmoudnia Source Code 31 06-23-2019 01:35


All times are GMT +8. The time now is 16:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX