Location:
Search - protector
Search list
Description: 原理:对Pe文件的.data节,.text节进行XOR加密,然后将带解密的Loader写入文件头和第一个段的开头之间,修改Entry Point使其指向Loader.
测试用例:使用vc6.0自动生成的mfc对话框应用程序。
参考文献:(1)def源码
(2)黑客调试技术揭秘
(3)yoda s protector源码-Principle: The Pe documents. Data section,. Text section to XOR encryption, and then will take declassified documents Loader write head and the first between the beginning of paragraph, modify Entry Point to point Loader. Test cases: the use of vc6. 0 automatically generated mfc dialog application. References: (1) def source (2) debug technology hackers Secret (3) yoda s protector source
Platform: |
Size: 456704 |
Author: 东南 |
Hits:
Description: Understanding the basics of protector packers, like AsProtect
Platform: |
Size: 44032 |
Author: feki00 |
Hits:
Description: Ms-Rem 写的进程保护例子
驱动是VC版
例子调用是DELPHI,
先用驱动加载工具加载驱动 Protector.sys
然后在启动例子,例子程序即被保护。
-Written by Ms-Rem-driven process is the protection of examples of examples of VC version is called DELPHI, first drive to load drivers loading tool and then start the example Protector.sys, for example, was the protection of the procedure.
Platform: |
Size: 9216 |
Author: r00tsh3ll |
Hits:
Description: Ms-Rem 写的进程保护完整源码
驱动是VC版
例子调用是DELPHI,
先用驱动加载工具加载驱动 Protector.sys
然后在启动例子,例子程序即被保护。-Ms-Rem protect the integrity of the process of writing source-driven example is the VC version is called DELPHI, the first tool used to load drivers to load drivers and then restart Protector.sys example, was the protection of examples of procedures.
Platform: |
Size: 3072 |
Author: r00tsh3ll |
Hits:
Description: virtual machine protect, best pe protector in the net , allows you to wrap every exported function
Platform: |
Size: 1072128 |
Author: croner |
Hits:
Description: morphine 2.7 delphi source code, is Win32 protector for PE files
Platform: |
Size: 31744 |
Author: UnNamed053 |
Hits:
Description: AMProtector - advanced PE Packer with LZMA compression and strong AMPRNG encryption.
Platform: |
Size: 84992 |
Author: Alexander Myasnikov |
Hits:
Description: 加壳机(vc源码)源码在vc7+xp-sp2下编译通过
原理:对Pe文件的.data节,.text节进行XOR加密,然后将带解密的Loader写入文件头和第一个段的开头之间,修改Entry Point使其指向Loader.
测试用例:使用vc6.0自动生成的mfc对话框应用程序。
参考文献:(1)def源码
(2)黑客调试技术揭秘
(3)yoda s protector源码
存在问题:只对.data节,.text节加密,且其中不能包含Resource,Import Table.....等结构,通用性很差
下图为测试用例的section table和directory table。 工具打包源码。加壳机
试用例.
加壳机源码.
加壳机静态mfc
-Packers machine (vc source) source in vc7+ xp-sp2 compiled by Principle: The Pe file. Data section,. Text section to XOR encryption, decryption of the Loader and then written to a file with the first and the beginning of a paragraph between the modified Entry Point to point Loader. test case: automatically generated using vc6.0 mfc dialog application. References: (1) def source (2) hackers debug Uncovered (3) yoda' s protector Source problem: only. Data section,. Text section of encryption, and which can not contain Resource, Import Table ..... structure of , generic photo shows poor test case under the section table and directory table. Tool Package source. Packers machine trial cases. Packers machine source. Packers machine static mfc
Platform: |
Size: 497664 |
Author: 程光 |
Hits:
Description: 这是易语言的功能模块,驱动模式,易天进程防杀模块-yi tian process protector
Platform: |
Size: 950272 |
Author: zhisen |
Hits:
Description: AV Super Protector is an antivirus program with source code vb 6.0
Platform: |
Size: 396288 |
Author: ferdy |
Hits:
Description: Another way for Folder protection technique
Platform: |
Size: 279552 |
Author: mxnoname |
Hits:
Description: It is about PE structure.
And it is about protector
Platform: |
Size: 380928 |
Author: jamesbond49 |
Hits:
Description: Elite Protector(VB6 Source Code) VB加密壳(VB6 源码)
Elite Protector(VB6 Source Code) VB加密壳(VB6 源码)-Elite Protector(VB6 Source Code)
Elite Protector(VB6 Source Code)
Elite Protector(VB6 Source Code)
Platform: |
Size: 1136640 |
Author: ahywg8 |
Hits:
Description: 改程序是用于进行10.4KV变压器微机保护程序,经测试通过-10.KV transformer protector code
Platform: |
Size: 179200 |
Author: 陈太金 |
Hits:
Description: Protector is a program & writen with delphi
Platform: |
Size: 3072 |
Author: Delphi |
Hits:
Description: Changing Hardware ID of Enigma Protector 3.x Protected File
Platform: |
Size: 18432 |
Author: Mohammad |
Hits:
Description: Vision-Based Pedestrian Detection The PROTECTOR System
Platform: |
Size: 774144 |
Author: vinayak |
Hits:
Description: Automatic BORE WELL MOTOR Protector PCB File For OrCad Drawing
Platform: |
Size: 11264 |
Author: manoj |
Hits:
Description: Source code protector proce-Source code protector process
Platform: |
Size: 8192 |
Author: Andreyka |
Hits:
Description: Protector de pantalla en pascal
Platform: |
Size: 2048 |
Author: alser1029 |
Hits: