MemExe Crypter by steve10120

posted 14 Sep 2010, 16:07 by Danny Rancher
This crypter is the latest rewrite of the self-injection code, by shapeless and steve10120. 

Original self-injecting crypter by shapeless: 

Original self-injecting unit by steve10120: 

The additional builder code in this release is necessary for two reasons: 
  1. To change the imagebase of the stub file to that of the target file. 
  2. To enlarge the last section so its big enough to cover the SizeOfImage of the target file. 
Author: steve10120 
Compiled: Delphi 2007 

Tested and working environments: Windows XP, Vista, 7. 

Only Delphi source code is included in the archive. 
Danny Rancher,
14 Sep 2010, 16:07