[Code-Crunchers] 137 bytes
Gil Dabah
arkon at ragestorm.net
Tue Nov 7 07:29:57 CST 2006
Matthew's idea was to do WinExec("http://blabla"),
but it's amazing that the PE Loader will download the file directly.
GJ :)
On 11/7/06, Solar Eclipse <solareclipse at phreedom.org> wrote:
>
> I didn't follow the rules about importing only KERNEL32.DLL and
> obfuscating all
> strings, but my PE file downloads and executes a payload from the Internet
> without actually using any code. That's gotta be worth some points :-)
>
> http://www.phreedom.org/solar/code/tinype/
>
> Solar Eclipse
>
>
> _______________________________________________
> Code-Crunchers mailing list
> Code-Crunchers at whitestar.linuxbox.org
> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://whitestar.linuxbox.org/pipermail/code-crunchers/attachments/20061107/e0e4aa27/attachment.htm
More information about the Code-Crunchers
mailing list