Location:
Search - delphi upx
Search list
Description: server.exe为服务端程序，用upx加壳后可达到9k左右,只是简单调用UrlDownloadToFile函数实现，没什么难度。
下载地址和保存路径长度设定为64个字节，主要是为了方便计算偏移地址。
brcc.bat设为你Delphi目录下bin子目录的路径。-server.exe for-service program, UPX shell can be reached about stamina, simply call UrlDownloadToFile Function, and there is nothing more difficult. To download and preserve the path set length of 64 bytes, mainly for the convenience of calculation offset address. Set your brcc.bat Delphi directory bin subdirectory path.
Platform: |
Size: 185609 |
Author: zft |
Hits:
Description: Delphi下使用一些Windows未公开函数的例子-Examples of some unpublished functions for Windows used in Delphi.
Platform: |
Size: 279552 |
Author: 站长 |
Hits:
Description: server.exe为服务端程序，用upx加壳后可达到9k左右,只是简单调用UrlDownloadToFile函数实现，没什么难度。
下载地址和保存路径长度设定为64个字节，主要是为了方便计算偏移地址。
brcc.bat设为你Delphi目录下bin子目录的路径。-server.exe for-service program, UPX shell can be reached about stamina, simply call UrlDownloadToFile Function, and there is nothing more difficult. To download and preserve the path set length of 64 bytes, mainly for the convenience of calculation offset address. Set your brcc.bat Delphi directory bin subdirectory path.
Platform: |
Size: 185344 |
Author: zft |
Hits:
Description: 软件介绍:反弹连接木马源码
１、编译服务端。
服务端在进行编译时会提示出错 （停在“fme.SaveToFile(stf) ”段） ，这是正常
的。因为这时编译的服务端没有捆绑登录的信息（即：客户ＩＰ、端口和连接密码）
其实这时的服务端可执行文件已经生成了，你在文件夹中就能找到该程序了。
２、编译客户端。
采用正常的编译步骤对客户端进行编译即可，但要注意的是，刚编译好的客户端未捆
绑服务端程序，所以当你点击“客户端配置”按钮图标时会提示出错！
３、服务端和客户端都编译好了以后，你可以使用UPXShell等加壳程序对它们进行加壳压
缩，可减少其三分之二的体积。
４、用附带的“文件捆绑”工具将服务端捆绑在客户端程序里面，捆绑后的程序即成为最
终的只有一个可执行文件的木马程序，就能使用该木马程序了。
５、运行该木马程序，点击“客户端配置”按钮，配置好你的IP地址（最好是固定的IP地
址）、你的端口号和你的连接密码（防止他人连接），这时会在当前目录下生成一个名为
“Rundll.exe”的文件，该文件即为木马服务端，将其发给被控制方运行后，你就能通过
客户端对其进行控制！
Platform: |
Size: 321536 |
Author: wang |
Hits:
Description: UPXShell 压缩解压缩Windows下的exe和dll文件, 其原理基于加壳原理, UPX也是一个Windows下的可执行文件加壳工具-Windows compression UPXShell extract exe and dll under the document, and its principle加壳based on the principle, UPX is a Windows executable file under加壳tools
Platform: |
Size: 636928 |
Author: BestDogKiller |
Hits:
Description: The final version of UPX scrambler and PE sources in Delphi and flat assembler.
Platform: |
Size: 17408 |
Author: LamiaD69 |
Hits:
Description: Anskya NTPacker Generator For:NT,2K,Xp,2K3,LH V1.0
Written By Anskya[GST]
Email:Anskya@Gmail.com
QQ:115447[小零]
GST Web:Www.GodExp.Com
My Web:Www.Anskya.Net
Thank:Aphex,x140d4n,[God Security Team] And You!
[
This program creates undetected executables that only run
on Windows NT, 2000, XP, 2003 and LongHorn.
]
Command Line:Command Line:Generator -s <File Path>
Example:
cmd:C:\Generator -s test.exe
cmd:FSG.exe test.exe
Stub.exe File Size:8k[NoPack]
{
数据采用资源保护.程序加壳后～可以使用别的加壳软件保护
(FSG,UPX,,PESpin,ASPr等等都可以几乎支持任何加壳软件,
当然你也可以在Stub代码中使用加壳软件的SDK来增强效果)
这个代码只是为了演示EXE内存运行,不支持系统服务程序和DLL
可以按照自己要求修改。。
}-Anskya NTPacker Generator For: NT, 2K, Xp, 2K3, LH V1.0 Written By Anskya [GST] Email: Anskya@Gmail.com QQ: 115447 [small zero] GST Web: Www.GodExp.Com My Web: Www. Anskya.Net Thank: Aphex, x140d4n, [God Security Team] And You! [This program creates undetected executables that only run on Windows NT, 2000, XP, 2003 and LongHorn.] Command Line: Command Line: Generator-s <File Path> Example: cmd: C: \ Generator-s test.exe cmd: FSG.exe test.exe Stub.exe File Size: 8k [NoPack] (data resource protection.加壳procedures after ~ can use other software to protect加壳(FSG, UPX,, PESpin, ASPr and so on can be加壳supports almost any software, of course, you can use at Stub code加壳software SDK to enhance the effect) of this code is only for demo EXE memory to run, do not support the system Service procedures and DLL can be modified according to their own requirements. . )
Platform: |
Size: 52224 |
Author: 许凤 |
Hits:
Description: Morphine v2.7，程序压缩源码，保护程序不被恶意修改-Morphine is very unique application for PE files encryption. Unlike
other PE encryptors and compressors Morphine includes own PE loader which
enables it to put whole source image to the .text section of new PE file. This
one is very powerful because you can compress source file with your favourite
compressor like UPX and then encrypt its output with Morphine. Another powerful
thing here is polymorphic engine which always creates absolutely different
decryptor for the new PE file. This mean if your favourite trojan horse is
detected by an antivirus you can encrypt it with Morphine. You will not get
the virus alert again.
Platform: |
Size: 31744 |
Author: hack |
Hits:
Description: 加壳工具 可以自己调节压缩率!保护你的程序不被破解-upx shell
Platform: |
Size: 648192 |
Author: lhwlhw |
Hits:
Description: dll,exe压缩工具 upx源代码，网上的代码，不是原创！-dll, exe compression tool upx source code, web code, not the original!
Platform: |
Size: 371712 |
Author: 王聪 |
Hits:
Description: 海盗远程控制1.2 说明
特性:
服务端不但能插入IE进程穿防火墙，又可选随意插系统目录的文件，不用生成DLL文件，无驱动隐藏，内存占用少。
适用于Windows 2000/XP/2003 不支持9x-Viking Remote Control 1.2 Description Features: server will not only into the process of wear IE firewall, also free to insert an optional file system directory, do not generate the DLL file, no driver hiding, less memory footprint. For Windows 2000/XP/2003 does not support 9x
Platform: |
Size: 1612800 |
Author: jslwei |
Hits:
Description: 一款有Delphi.编写的UPX压缩壳源码，完美唔错编译，还是比较实用的，很有研究价值-One with Delphi. Prepared by the UPX compression shell source, perfect 唔错 compile, it is quite practical, great research value
Platform: |
Size: 99328 |
Author: Jack |
Hits:
Description: UPX 壳的变异补丁源码，10年8月份。-UPX shell patch source
Platform: |
Size: 88064 |
Author: xcoder |
Hits:
Description: A fast 3D mesh viewer.
Released as Freeware and open-sourced
under Mozilla PL (http://mozilla.org)
3D Formats: 3DS, OBJ, SMD, MD2, TIN, PLY, STL
2D Formats: JPG, BMP, TGA, CEL etc.
Supports smooth and flat shading, wireframes,
hidden lines removal, texturing and antialiasing
(if supported by hardware).
GLSViewer was made and packaged with the following
tools and libraries:
- Delphi (http://www.borland.com/delphi/)
- GLScene (http://glscene.net)
- GraphicEx (http://www.delphi-gems.com)
- RxLib (http://sourceforge.net/projects/rxlib)
- UPX (http://upx.sourceforge.net/)
Platform: |
Size: 425984 |
Author: GF0309 |
Hits:
Description:
熊猫烧香原代码
熊猫烧香, 十六进制, Windows, 源代码, 字符串
熊猫烧香源代码
program Japussy
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry}
const
HeaderSize = 82432 //病毒体的大小
IconOffset = EB8 //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912 //Upx压缩过病毒体的大小
IconOffset = BC //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 --8086 Japussy.exe
}
IconSize = E8 //PE文件主图标的大小--744字节
IconTail = IconOffset + IconSize //PE文件主图标的尾部
ID = 444444 //感染标记
//垃圾码，以备写入
Catchword = If a race need to be killed out, it must be Yamato. +
If a country need to be destroyed, it must be Japan! +
***
{$R *.RES}
function : Integer): Integer-Panda original code Panda burning incense, hexadecimal, Windows source code, string the panda source code program Japussy uses Windows, the SysUtils the Classes, Graphics, ShellAPI {, Registry} const HeaderSize = 82 432 // virions the the size of IconOffset = EB8 // PE file main icon offset// in the above compile my Delphi5 SP1 size, other versions of Delphi may be different// Find 2800000020 hexadecimal string can be found in the main icon the offset {HeaderSize = 38912 // Upx compression over the the virus body size IconOffset = BC // Upx compressed PE file offset of the main icons the// Upx 1.24W Usage: upx-9- 8086 Japussy. exe} IconSize = E8 // PE file main icon size the- 744 the byte IconTail = IconOffset+ IconSize // tail of the PE file main icon ID = 444 444 // infection markers// junk yard to prepare written Catchword = ' If a race need to be killed out, it must be Yamato.' +' If a country need to be destroyed, it must be Japan! ' +' *** {$ R*. RES} function:
Platform: |
Size: 4096 |
Author: 炎热 |
Hits:
Description: PE Explorer(pexplorer)是功能强悍的软件汉化工具，也是大家常用的反编译工具，能可视化翻遍Delphi、C++ 、VB等语言编写的程序，另外，还具备有W32DASM 软件的反编译能力和PEditor 软件的 PE 文件头编辑功能，可以更容易的分析源代码，修复损坏了的资源，还能任意修改程序内置的资源、信息，可以处理的文件格式包括EXE、DLL、DRV、BPL、DPL、SYS、CPL、OCX、SCR 等32位可执行程序。PE Explorer V1.99 R6 汉化版在该工具中附加了UPX脱壳插件。-PE Explorer (pexplorer) is a function powerful software localization tool, is also commonly used anti compiler tool, can turn over Delphi, C++, visual VB language program, in addition, also has a PE file with W32DASM software decompile capacity and PEditor software editing function, can be the source code analysis easier., repair damaged resources, can modify the program built-in resources, information, can handle file formats including EXE, DLL, DRV, BPL, DPL, SYS, CPL, OCX, SCR, 32 bit executable program. PE Explorer V1.99 R6 Chinese version attached to UPX hulling plug-ins in the tool.
Platform: |
Size: 3074048 |
Author: 大威 |
Hits:
Description: 最早熊猫烧香源代码 仅供学习参考 部分样本
一下
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry};
const
HeaderSize = 82432; //病毒体的大小
IconOffset = $12EB8; //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912; //Upx压缩过病毒体的大小
IconOffset = $92BC; //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 --8086 Japussy.exe
}
IconSize = $2E8; //PE文件主图标的大小--744字节
IconTail = IconOffset + IconSize; //PE文件主图标的尾部
ID = $44444444; //感染标记
//垃圾码，以备写入
Catchword = 'If a race need to be killed out, it must be Yamato. ' +
'If a country need to be destroyed, it must be Japan! ' +(Microsoft Developer Studio Workspace File, Format Version 6.00)
Platform: |
Size: 4096 |
Author: 那山小黑 |
Hits: