hasherezade

Results 273 comments of hasherezade

Hi! So, I tested it with a bit newer version of Avast - using an offline installer linked [here](https://forum.avast.com/index.php?topic=322545.0). + Installer SHA256: `1d118995b6c19c469de5d2f721e3702cd8b40baf9ce35f280b219c58977c446a` + Program version: 23.2.6053 (build 23.2.7961.0) ![avast_free](https://user-images.githubusercontent.com/3115348/229371441-fb7d27c6-eb6c-420f-aaa7-69d602d72f6a.png)...

Hi @sleahootqsqnl ! As the message says, your PE file has no relocations - so in other words it is not a good material for shellcodification. If a PE has...

Hi guys! I guess that you are experiencing the problem that was described here: https://github.com/hasherezade/pe_to_shellcode/issues/38 I will try to figure out if it can be resolved. In the meanwhile, please...

Hi @VoldeSec ! First of all I need to know more details to investigate what could possibly have cause it. + Did your converted shellcode worked when you try to...

@VoldeSec - does it work if you try to inject the same shellcode to the same process, but using `injector32/64 ` (from the pe2shc release package)?

I see, so if the shellcode works, and it can be injected with the original injector, then it seems to be a problem with your replacement injector. BTW, using module_overloading...

ok, I accepted your invite. Let's talk on Wire.

hi @k1988 ! No, this is not a bug, the output looks valid. The test_case7 is supposed to demonstrate that the exceptions thrown from the manually loaded module can be...

Hi, this seems a MUI problem. I explained it in details here: https://github.com/hasherezade/libpeconv/issues/44

Hi @VBoucher ! This is not a bug. Actually, some of the PEs are build with `/Brepro` flag. This flag enables reproducible builds. It means, every build from the same...