MemExe Crypter by steve10120
Post date: Sep 14, 2010 11:07:25 PM
This crypter is the latest rewrite of the self-injection code, by shapeless and steve10120.
Original self-injecting crypter by shapeless:
Original self-injecting unit by steve10120:
MemExe - Replace current process with custom PE
The additional builder code in this release is necessary for two reasons:
- To change the imagebase of the stub file to that of the target file.
- To enlarge the last section so its big enough to cover the SizeOfImage of the target file.
Author: steve10120
Compiled: Delphi 2007
Tested and working environments: Windows XP, Vista, 7.
Only Delphi source code is included in the archive.