1,091 questions
Score of 2
1 answer
143 views
Why does x32dbg Patch File overwrite the beginning of .text when patching the virtual padding between PE headers and the first section?
I'm trying to understand how PE image mapping works, and I found a behavior that I can't explain.
Screenshot of Optional Header :-
The PE Optional Header. The SizeOfHeaders field at offset 0xD4 has ...
- reputation score 378
Score of -1
2 answers
81 views
Placing own variable inside existing Windows executable [closed]
I'm modifying a behavior of an existing Windows app and need to keep my own variable somewhere. This variable is calculated in one subroutine and then should be accessed from another one. It means, it ...
- reputation score 31
Score of 0
0 answers
196 views
How to generate an executable file in the Portable Executable file format?
Dear Fellow Developers,
I am interested in learning how the Portable Executable format works. So far, I have written files in the com-format, which are executable in DosBox. However, I would like to ...
- reputation score 19
Score of 1
1 answer
99 views
Custom x64 Windows PE Not Running
I was trying to manually craft my own windows pe and for some reason cant seem to find out why my program isnt running, ive crossed checked all my alignments, file alignments, section alignments and ...
- reputation score 71
Score of 6
0 answers
310 views
Local static variables are not initialized if app is loaded as dll
We have sandbox.exe, app.exe and app.dll. If users want to run the not sandboxed application, they run app.exe. If users want to run the application in the sandbox, they run sandbox.exe that loads app....
- reputation score 45208
Score of 2
0 answers
120 views
Control-flow obfuscation without increasing code size? [closed]
I'm developing a PE executable packer and want to implement some form of lightweight, simple control-flow obfuscation that doesn't add any extra bytes to the original exe's .text section (i.e. no ...
- reputation score 2271
Score of 0
1 answer
68 views
How can I pad the bytes in a section defined by a pragma directive?
So I have these two macros
#define ESTART \
_Pragma("optimize(\"\", off)") \
_Pragma("section(\".secure\", execute, read, write)") \
_Pragma("...
- reputation score 7
Score of 0
2 answers
121 views
winapi WriteFileA crashes the program in assembly (nasm)
(I'm on Windows 11) CreateFileA is crashing, but I have no clue why. I know that CreateFileA is crashing because the program doesn't loop at "wat: jmp wat"; instead it stops immediately. I ...
- reputation score 83
Score of 4
1 answer
113 views
NASM assembly PE format handwritten imports doesn't import anything
This PE format .EXE program should print "owwwmagawd" in cmd when run, but instead the program hangs without printing anything. I figured there could be a problem with Windows not filling ...
- reputation score 83
Score of 2
2 answers
199 views
Replace-Files Powershell
I'm having some struggles with my PowerShell script. I am trying to make an Automated Script that will Perform the Utilman.exe Hack. The script has menus and options: Load, Unload, List Disk and ...
- reputation score 21
Score of 0
0 answers
169 views
GetProcAddress always returning 0x00000000 after changing the DllBase in the PEB
I'm trying to understand why I'm getting nothing from GetProcAddress().
I have been learning to build my own protected executable. I load a copy of ntdll.dll and map it into memory and then read the ...
- reputation score 21
Score of 2
1 answer
368 views
x64 Reflective DLL Injector (translate C++ to Delphi)
I need an x64 Reflective DLL Injector written in Delphi.
I found a C version that works fine (compiled with DevC++ with 64bit app support). I made a Delphi version that compiles fine and without any ...
- reputation score 316
Score of 0
1 answer
126 views
How to find .text section in PE file without PE headers
This is my code to get text section
section get_text_section(std::uintptr_t module)
{
section text_section = {};
PIMAGE_DOS_HEADER dosheader = reinterpret_cast<...
- reputation score 7
Score of 1
0 answers
46 views
Why don't I get the correct function RVA from the PE export table in my loader code?
I'm writing a minimal PE loader that parses the export table to locate functions by name, in my hypervisor. However, when I try to retrieve the RVA of a function, the value seems incorrect. Here's the ...
- reputation score 11
Score of 0
2 answers
150 views
How can I inject user-specific data (like a public key) into a pre-built Go binary without needing Go installed?
I am working on a Go application that encrypts sensitive files using a public key. The goal of my project is to create a customizable encryption tool that allows users to generate an executable ...
- reputation score 57
