MemExe Crypter by steve10120

Post date: Sep 14, 2010 11:07:25 PM

This crypter is the latest rewrite of the self-injection code, by shapeless and steve10120.

Original self-injecting crypter by shapeless:

MemExe Crypter by shapeless

Original self-injecting unit by steve10120:

MemExe - Replace current process with custom PE

The additional builder code in this release is necessary for two reasons:

1. To change the imagebase of the stub file to that of the target file.
2. To enlarge the last section so its big enough to cover the SizeOfImage of the target file.

Author: steve10120

Compiled: Delphi 2007

Tested and working environments: Windows XP, Vista, 7.

Only Delphi source code is included in the archive.