Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Trojan project

Name: Anonymous 2011-03-20 10:23

Greetings /prog/, I'm from a neighboring board.

I'm on the last phases of a trojan project. I'm having a hard time finding the best way of hiding my malicious executable within another executable. I assume the best way of doing that would involve assembly? "Code caves" seem to be what I'm looking for, though there doesn't seem to be much tutorials for it. Any advice? Thanks in advance.

Name: Anonymous 2011-03-20 13:13

>>15
Just inject a piece of code which does what you want and then have your code jump back to the entrypoint (adjust the entrypoint to point to your code). A more clever way could be using tls-callbacks (that may be too evil as it will also fool some reverse-engineering tools, like the code would be executed before the application even loads in a debugger). How you're loading the executable or dll in memory, or the layout of the code in general is up to you, I won't give such specifics as they can be just about anything.

Wait, why am I helping someone to hide trojans :(

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List