Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Trojan project

Name: Anonymous 2011-03-20 10:23

Greetings /prog/, I'm from a neighboring board.

I'm on the last phases of a trojan project. I'm having a hard time finding the best way of hiding my malicious executable within another executable. I assume the best way of doing that would involve assembly? "Code caves" seem to be what I'm looking for, though there doesn't seem to be much tutorials for it. Any advice? Thanks in advance.

Name: Anonymous 2011-03-20 13:32

>>17
Just inject a piece of code which does what you want and then have your code jump back to the entrypoint
I've never had the time to get into assembly. If the operation will be a simple JMP and RET operation, there are a few questions that need to be addressed.
-Which lines of code from my malicious executable need to be injected into the carrier executable?
-Where should I inject the code? I assume this is where ``code caves" come into play.
-Are there any header files or meta data in the 'exe' file format that I also need to insert?

It would probably be useful to know the exe file format.

>>18
"dump the executable and run it"
For this project I'm staying within my means. In other words, the most simple operation will suffice (for now).

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List