hasherezade
hasherezade
Hi! So, I tested it with a bit newer version of Avast - using an offline installer linked [here](https://forum.avast.com/index.php?topic=322545.0). + Installer SHA256: `1d118995b6c19c469de5d2f721e3702cd8b40baf9ce35f280b219c58977c446a` + Program version: 23.2.6053 (build 23.2.7961.0) ...
Hi @sleahootqsqnl ! As the message says, your PE file has no relocations - so in other words it is not a good material for shellcodification. If a PE has...
Hi guys! I guess that you are experiencing the problem that was described here: https://github.com/hasherezade/pe_to_shellcode/issues/38 I will try to figure out if it can be resolved. In the meanwhile, please...
Hi @VoldeSec ! First of all I need to know more details to investigate what could possibly have cause it. + Did your converted shellcode worked when you try to...
@VoldeSec - does it work if you try to inject the same shellcode to the same process, but using `injector32/64 ` (from the pe2shc release package)?
I see, so if the shellcode works, and it can be injected with the original injector, then it seems to be a problem with your replacement injector. BTW, using module_overloading...
ok, I accepted your invite. Let's talk on Wire.
hi @k1988 ! No, this is not a bug, the output looks valid. The test_case7 is supposed to demonstrate that the exceptions thrown from the manually loaded module can be...
Hi, this seems a MUI problem. I explained it in details here: https://github.com/hasherezade/libpeconv/issues/44
Hi @VBoucher ! This is not a bug. Actually, some of the PEs are build with `/Brepro` flag. This flag enables reproducible builds. It means, every build from the same...