Results 1 to 10 of 10

Thread: Binary metamorphosis

  1. #1

    Thread Starter
    Lively Member Paul A. Gagniuc's Avatar
    Join Date
    Feb 2022
    Location
    Romania, Bucharest
    Posts
    66

    Binary metamorphosis

    Consider a situation in which you don't have te source code of your own application; but the compiled version is usable as a component part in a more complex software system. The VB6 applications shown below use the hexadecimal system to encode the binary content of an executable file. The point here is that one may compile an executable file that contains another executable file inside. Once the new executable file is executed, it is able to write the embedded executable file on disk as an independent executable file.


    Download: Binary metamorphosis


    Name:  2.jpg
Views: 437
Size:  59.7 KB


    Name:  tini.jpg
Views: 491
Size:  15.1 KB
    Last edited by Paul A. Gagniuc; Mar 21st, 2022 at 04:01 AM.

  2. #2
    Super Moderator Shaggy Hiker's Avatar
    Join Date
    Aug 2002
    Location
    Idaho
    Posts
    40,102

    Re: Binary metamorphosis

    What possible use does this have?
    My usual boring signature: Nothing

  3. #3

    Thread Starter
    Lively Member Paul A. Gagniuc's Avatar
    Join Date
    Feb 2022
    Location
    Romania, Bucharest
    Posts
    66

    Re: Binary metamorphosis

    Quote Originally Posted by Shaggy Hiker View Post
    What possible use does this have?
    One use is packing/unpacking different resource or dependency files inside the main executable to avoid errors.
    Last edited by Paul A. Gagniuc; Mar 13th, 2022 at 11:59 AM.

  4. #4
    PowerPoster dilettante's Avatar
    Join Date
    Feb 2006
    Posts
    24,487

    Re: Binary metamorphosis

    It also works great for getting programs recognized as VB6 object code to automatically be assigned a higher threat score by antimalware tools before any deep analysis begins.

    Writing "droppers" in VB6 hurts all of us.

  5. #5

    Thread Starter
    Lively Member Paul A. Gagniuc's Avatar
    Join Date
    Feb 2022
    Location
    Romania, Bucharest
    Posts
    66

    Re: Binary metamorphosis

    Quote Originally Posted by dilettante View Post
    It also works great for getting programs recognized as VB6 object code to automatically be assigned a higher threat score by antimalware tools before any deep analysis begins.

    Writing "droppers" in VB6 hurts all of us.
    What do you advise?

    Also please read the text from subtitle "Why is this important?" from my other repository.

  6. #6
    Addicted Member jg.sa's Avatar
    Join Date
    Nov 2017
    Location
    South Australia ( SA )
    Posts
    200

    Re: Binary metamorphosis

    G'Day PAG

    I'm certain you can understand that some ppl are concerned.

    Don't be put off by the concern in this thread.

    I find reading your code very interesting as I'm 1 of those crazy ppl. who likes to read code like a book !!!

    The code with the high level maths are excellent posts.

  7. #7
    Banned
    Join Date
    May 2020
    Location
    https://t.me/pump_upp
    Posts
    42

    Re: Binary metamorphosis

    I try and use it very well...but it runs very slow and crashes with files larger than 1MB

    I also have a similar source code that creates a DLL into source code, then burns it to disc and uses it

    I don't speak English ... Google translate ... please understand !

  8. #8

    Thread Starter
    Lively Member Paul A. Gagniuc's Avatar
    Join Date
    Feb 2022
    Location
    Romania, Bucharest
    Posts
    66

    Re: Binary metamorphosis

    Quote Originally Posted by PhuongNam View Post
    I try and use it very well...but it runs very slow and crashes with files larger than 1MB

    I also have a similar source code that creates a DLL into source code, then burns it to disc and uses it

    I don't speak English ... Google translate ... please understand !
    This is exactly the type of use I was talking about. I honestly didn't think anyone would want to store files larger than 1M inside an executable. This method is suitable for small binaries, small images, dll's, ocx's, small sound files, ico files and so on. Where is your VB6 source posted?
    Last edited by Paul A. Gagniuc; Mar 14th, 2022 at 04:35 AM.

  9. #9
    PowerPoster dilettante's Avatar
    Join Date
    Feb 2006
    Posts
    24,487

    Re: Binary metamorphosis

    Just learn and use proper deployment techniques.

  10. #10

    Thread Starter
    Lively Member Paul A. Gagniuc's Avatar
    Join Date
    Feb 2022
    Location
    Romania, Bucharest
    Posts
    66

    Re: Binary metamorphosis

    Quote Originally Posted by dilettante View Post
    Just learn and use proper deployment techniques.
    I didn't expect that. What makes a technique proper and another one improper? Are WinZip or WinRar "droppers" improper?

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width