Location:
Search - PE
Search list
Description: 对windows可执行程序格式PE文件的详细分析。理解PE文件对理解程序有很好的帮助。-Pairs of windows executable PE file format, a detailed analysis. Understand the procedures for PE files have a good understanding help.
Platform: |
Size: 40960 |
Author: 告诉 |
Hits:
Description: 病毒原理，分析防范技术介绍DOS病毒
引导区病毒
文件型病毒
混合型病毒
Windows病毒
VBS脚本病毒
宏病毒
网页病毒
Win32 PE病毒
-The virus theory, analysis techniques introduced to prevent DOS boot sector virus, file virus hybrid virus, virus, Windows virus VBS script virus macro virus, the virus Win32 PE virus web
Platform: |
Size: 277504 |
Author: lin |
Hits:
Description: PE+Tutorial，国外大牛写的很好的pe文件格式，英文的-PE+ Tutorial, written by large foreign cattle a good pe file format, in English
Platform: |
Size: 221184 |
Author: 胡涛 |
Hits:
Description: 简单的PE病毒，感染当前目录下的.exe文件-sinple PE virus, infect the .exe file under the same directory
Platform: |
Size: 10240 |
Author: lianshibo |
Hits:
Description: 《导入表内注入代码》文章代码，本文介绍注入代码到PE（Portable Executable可移植的执行体）文件格式的Import Table（导入表，也有译为“引入表”）技术，其也被称为API重定向技术（API redirection technique）。 -" Import the table into the code" article code, article describes the code injected into the PE (Portable Executable portable executable) file format, Import Table (to import the table, but also translated as " import table" ) technology, also known as API redirection technique (API redirection technique).
Platform: |
Size: 531456 |
Author: rihou |
Hits:
Description: PE/coff specification from Microsoft
Platform: |
Size: 196608 |
Author: joe |
Hits:
Description: 可以修改文件的只读 隐藏 系统 存档 时间等属性 PE文件的版本属性-You can modify the file read-only archive hidden system attributes such as PE time version of the file attributes
Platform: |
Size: 92160 |
Author: kk |
Hits:
Description: 给PE文件添加基恩的功能，弹出对话框，以及BEEP-Keane PE file to add features, pop-up dialog box, as well as the BEEP
Platform: |
Size: 3906560 |
Author: lusong |
Hits:
Description: PE文件编程！！虽简单 ，但有对PE文件所有基本操作 熟悉PE文件也是木马编写者的必备技能之一-PE file programming! ! Though simple, but there are all the basic operations of the PE file is also a Trojan writers are familiar with PE files, one of the essential skills
Platform: |
Size: 3117056 |
Author: ew |
Hits:
Description: Full PE files structures definitions in one header and all commented.
Platform: |
Size: 13312 |
Author: Pudn4everFF |
Hits:
Description: 一个简单的添加PE段的小工具源码，学习PE结构的可以参考一下-A simple gadget to add PE segment source, learning the structure of reference for PE
Platform: |
Size: 230400 |
Author: 阿牛 |
Hits:
Description: 一个VC的查看PE结构信息的代码，学习PE结构的朋友可以看一下-A VC' s view PE structural information of the code, learning the structure of PE friends can look at the
Platform: |
Size: 1334272 |
Author: 阿牛 |
Hits:
Description: 可以显示pe文件的结构
是学习pe文件的良好软件和源码-peFile
Platform: |
Size: 29696 |
Author: 李伟 |
Hits:
Description: Show PE Header in hd
Platform: |
Size: 11612160 |
Author: hd |
Hits:
Description: 通过一个猜字母的游戏，练习perl中的直接量列表、数组、s p l i t、j o i n、上下文和f o r e a c h循环等概念-it`s a word guess game,by which you can
practice the concepts array,datasheet,split,join and foreach of perl
Platform: |
Size: 1024 |
Author: lynn |
Hits:
Description: 利用最小总错误概率准则设计检测器的程序，计算最佳门限，研究门限在一定范围内变化时，Pe随门限变化的情况，给出Pe~ 曲线，对模拟结果进行分析。程序有注释。
-Use of design guidelines for minimizing the probability of error detection procedures, calculate the best threshold of threshold changes in a certain range, Pe threshold changes with the situation, given Pe ~ curve analysis of the simulation results. Procedure notes.
Platform: |
Size: 25600 |
Author: 王综新 |
Hits:
Description: 加壳机（vc源码）源码在vc7+xp-sp2下编译通过
原理：对Pe文件的.data节，.text节进行XOR加密，然后将带解密的Loader写入文件头和第一个段的开头之间，修改Entry Point使其指向Loader.
测试用例：使用vc6.0自动生成的mfc对话框应用程序。
参考文献：(1)def源码
(2)黑客调试技术揭秘
(3)yoda s protector源码
存在问题：只对.data节,.text节加密，且其中不能包含Resource，Import Table.....等结构,通用性很差
下图为测试用例的section table和directory table。 工具打包源码。加壳机
试用例.
加壳机源码.
加壳机静态mfc
-Packers machine (vc source) source in vc7+ xp-sp2 compiled by Principle: The Pe file. Data section,. Text section to XOR encryption, decryption of the Loader and then written to a file with the first and the beginning of a paragraph between the modified Entry Point to point Loader. test case: automatically generated using vc6.0 mfc dialog application. References: (1) def source (2) hackers debug Uncovered (3) yoda' s protector Source problem: only. Data section,. Text section of encryption, and which can not contain Resource, Import Table ..... structure of , generic photo shows poor test case under the section table and directory table. Tool Package source. Packers machine trial cases. Packers machine source. Packers machine static mfc
Platform: |
Size: 497664 |
Author: 程光 |
Hits:
Description: 功能极为强大的可视化汉化集成工具，可直接浏览、修改软件资源，包括菜单、对话框、字符串表等； 另外，还具备有 W32DASM 软件的反编译能力和PEditor 软件的 PE 文件头编辑功能，可以更容易的分析源代码，修复损坏了的资源，可以处理 PE 格式的文件如：EXE、DLL、DRV、BPL、DPL、SYS、CPL、OCX、SCR 等 32 位可执行程序。-Extremely powerful integrated visual localization tool that can directly view, modify the software resources, including menus, dialog boxes, string tables, etc. In addition, it also has a W32DASM decompile the software capabilities and software of the PE file header PEditor editing can more easily analyze the source code, repair damaged resources, can handle the PE file format, such as: EXE, DLL, DRV, BPL, DPL, SYS, CPL, OCX, SCR and other 32-bit executable.
Platform: |
Size: 498688 |
Author: 梁生 |
Hits:
Description: hook技术，用于注入pe拦掉网络封包，有利于网络游戏的分析-hook technology for network packet injection pe block away, is conducive to the analysis of online games
Platform: |
Size: 1787904 |
Author: 钟小春 |
Hits:
Description: 解析PE文件格式源代码，学习PE文件结构的首选-PE file format
Platform: |
Size: 70656 |
Author: wangwh |
Hits:
«
1
2
...
45
46
47
48
49
50»