ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content



Photo

PEunion - Crypter (Downloader - Anti VM,Wireshark)...


  • Please log in to reply
PEunion - Crypter (Downloader - Anti VM,Wireshark)...

#151

ra5wraw55
ra5wraw55
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 3
Threads: 0
Joined: Mar 16, 2021
Credits: 0
Three years registered
#151

PEunion
PEunion bundles multiple executables (or any other file type) into a single file. Each file can be configured individually to be compressed, encrypted, etc. In addition, an URL can be provided for a download to be executed.
The resulting binary is compiled from dynamically generated C# code. No resources are exposed that can be harvested using tools like Resource Hacker. PEunion does not use managed resources either. Files are stored in byte[] code definitions and when encryption and compression is applied, files become as obscure as they can get.
And on top of that, obfuscation is applied to a maximal extent! Variable names are obfuscated using barely distinguishable Unicode characters. String literals for both strings that you provide, as well as constant string literals are encrypted.
PEunion can be either used as a binder for multiple files, as a crypter for a single file, or as a downloader.
 
Screenshots
This is the application interface. First, you add the files to your project.
Each file can be configured individually. Default settings already include obfuscation, compression and encryption. Relevant settings are primarily: Where to drop the file, using what name and whether or not to execute it and so on...
The project can be saved into a .peu file, which includes all project information. Paths to your files are relative if they are located in the same directory or a sub directory.
001.png

PEunion can also be used as a downloader. Simply specify a URL and provide drop & execution parameters. Of course, bundled files and URL downloads can be mixed in any constellation.

002.png
Settings
For the C# code that is generated, compiler settings can be configured here. Usually, you will be looking to change the icon and assembly info:
003.png

The next two pages include settings for obfuscation and startup parameters. Default obfuscation settings are at maximum, however they can be changed, if required.
004.png005.png

See more bellow !

 

dwawaraw


  • 0

#152

debugging
debugging
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 9
Threads: 0
Joined: Apr 08, 2020
Credits: 0
Four years registered
#152

nice


  • 0

#153

doctorhaxor193
doctorhaxor193
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 5
Threads: 0
Joined: Apr 19, 2021
Credits: 0
Three years registered
#153

be


  • 0

#154

kid2021
kid2021
    Offline
    0
    Rep
    0
    Likes

    Member

Posts: 45
Threads: 0
Joined: Apr 19, 2021
Credits: 0

Three years registered
#154

+rep thanks brother 


  • 0

#155

Prepared11
Prepared11
    Offline
    0
    Rep
    0
    Likes

    Member

Posts: 42
Threads: 0
Joined: Feb 09, 2021
Credits: 0
Three years registered
#155

thanks


  • 0

#156

RainbowsEvery
RainbowsEvery
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 6
Threads: 0
Joined: Aug 14, 2018
Credits: 0
Five years registered
#156

Thanks, hope it works with my file here.

 


  • 0

#157

TH0MIEQH
TH0MIEQH
    Offline
    0
    Rep
    -1
    Likes

    Member

  • PipPipPip
Posts: 61
Threads: 2
Joined: Mar 16, 2021
Credits: 0

Three years registered
#157

nice


  • 0

#158

rapoo67
rapoo67
    Offline
    0
    Rep
    0
    Likes

    Veteran

  • PipPipPipPipPipPipPip
Posts: 421
Threads: 2
Joined: Jun 25, 2020
Credits: 0

Three years registered
#158

awesomeeeeeeeeeeeee


  • 0


 Users browsing this thread: