pe-injector

#include <disclaimer.h>
/*  Simple malware that performs PE Injection.
    This is my smol project for learning about PE files (may have some 🐞).
    Becareful! It will destroy your executables. */

usage

git clone https://github.com/hitori1403/pe-injector.git
cd pe-injector
make

It will produce a file called shellcode.exe. Use it carefully!

Take a quick look at Makefile for more details.

features

• Inject itself into others PE files in the same directory
• TLS Injection
• Patch PEHeader.AddressOfEntryPoint if TLS Injection fails
• IAT Patching (needs more time)
• Anti-Debugging (BeingDebugged flag)
• Anti-VM based on __cpuid()
• Simple oligomorphism with XOR and ROT128

references

• From a C project, through assembly, to shellcode
• Executing Position Independent Shellcode from Object Files in Memory
• sakeInject - TLS (Thread Local Storage) Injector in C/C++
• Malware - IAT Hooking
• Injecting Code using Imported Functions into Native PE Files
• pe-loader
• Al-Khaser