Exetools - All Packer | Protector Source

Exetools (https://forum.exetools.com/index.php)

- Source Code (https://forum.exetools.com/forumdisplay.php?f=46)

- - All Packer | Protector Source (https://forum.exetools.com/showthread.php?t=16128)

mupack + C++

Code:

 mupack (public build)



**Disclaimer**



**Do not expect any support/help. Pull requests will be dismissed.**





This is a small executable packer that I have been working on and off for some time. 

There is some bugs:



Most obvious known bugs:

* Incompatibility with shared.dll of foobar2000.

* No load config directory support.



mupack3 is developed in private and is designed to fix these issues and *many* others, so don't expect a public release at all.

Virus scanners now scan for mupack2, making it somewhat useless now (thanks to people that abused it). 

Which is why hence a private version for me exists, to pack my own prods.



Source code might be useful for people who want to read how to develop a packer in mostly C though.

Quote:

Originally Posted by REPUBLiC (Post 135994)

[B]mupack + C++[/B

Original thread by @Mudlord: https://forum.exetools.com/showthread.php?t=17028

His views on licensing: https://github.com/mlcodewerks
[and many posts on Hydrogenaudio]

UPXredir - Delphi

Code:

Package: upxredir.rar

Date: January 19, 2k4

Author: archphase archphase[at]hackermail.com

Site: http://archphase.united.net.kg/

Team: http://archphase.e-plutonia.com



Summary: Alright my first `real` release

for NWC, feels good, `eh?  Alright anyways

back to topic.  UPXredir will turn your

UPXed executables into tottally undetected

files, cool huh?  It does this by injecting

a section into the target executable then

bassically being sneaky and jmping back into

the original decompression of UPX, point is

that your executables are 100% undetected from

KAV and i presume other AV.



Files:

 - .\upxredir.exe - UPXredir, the actual program

 - .\src\ - The sourcecode for this beauty :-)

 - .\doc\how.doc - More nfo on how it does it.

 - .\readme.txt - yer looking at me, *blush*



 - How to use:

 1. Pack an executables (normally) w/ UPX.

 2. Run upxredir and select the executable and

 press process executable.

 3. Fin! Have fun :-)



 - Note that this source code is provided for EDUCATIONAL

 purposes only and is ment to yield those of us who want to

 further our knowledge not to be exported for harm to another.

 The source code is my personal work and no others, therefore

 I say that you can use it to you hearts content but you must

 refrence back to the original author (archphase).  With that

 said enjoy the sourcecode and play nice kids.



Regards,

archphase

Unopix 0.94 by bagie

Code:

UPX scrambler and PE cryptor with sources in Delphi.



Coder: bagie



Compiled: Delphi 2007

PC Shrink v0.29 - ASM

Quote:

BETA VERSION Phrozen Crew PE Shrinker v0.29 by Virogen (c)1999 Virogen/PC email: [email protected] www: http://virogen.cjb.net
PCShrink v0.28 is a competitive PE compressor currently in
its early to mid stages of development. The biggest difference
compressed executable size of UPX/Petite and PCShrink is due
to the compression algorithm (which will be improved upon soon)
and the current inability of PCShrink to merge more than two
sections together.
Features:
+Compresses code, data, imports, and resources.
+Restructures resource section for better compression.
+Preserves icons and version information.
+Removes debug information.
+Realigns, rebuilds, and trims PE.
+Very small, fast decompressor (LZRW1).
+Calculates correct new checksum.
+Preserves file date/time.
Warning: DO NOT ATTEMPT TO SHRINK DLLs! Support for relocations
has not been added yet.
v0.30 will introduce:
+New compression algorithm.
+Improved section merging.
+Relocation support.
+Optimizations.
Usage:
-PCSHRINK filename
Update: v0.11: Fixed bug like 10 minutes after initial release.
thanks to nIabI for testing.
v0.12: Optimized lzrw1 decompression code some
v0.13: Rewrote lzrw1 decompression procedure, vast improvement.
Removed NULLing of destination buffer, not necessary
I don't think.
v0.14: +Fixed bug in LCC-WIN32 applications, where physical
size of of sections is, surprisingly enough, not aligned.
+No longer flagged by AVP as suspicious.
v0.20: +Removes reloc table because it's not viable anymore
anyway. This should cause no problems except in DLLs.
In other words, don't use this utility on DLLs.
+Compresses all resource data following the last icon,
group icon, or version information. In other words,
as much as possible without removing the shell icon and
version information and not having to restructure
the entire resource section. v0.30 will restructure the
import section to improve compression.
+Added compression of import table.
+Removes debug information.
+Moved symbiont up to end of last section raw data.
+Renamed to PCSHRINK.
v0.26: +Removes debug directory rva and size.
+Resource section restructuring added!
+Bug fix: I imported my resource type equates from
windows.inc. Turns out the RT_GROUPICON was wrong,
causing some applications to lose their shell icon
after compression.
+Fixed alignfile bug where handle was being closed.
v0.28: +Added GUI
+Added option to not restructure resource data
+Added merging capabilities of first two sections.
+TiTi/Blizzard suggested and coded an update for
vgalign. His update to the vgalign routine is
incorporated.
v0.29: +Fixed stack bug which caused blue screens in win9x.
v0.30 ::todo::new compression algorithm
::todo::added section merging capabilities of all sect