[Code-Crunchers] [funsec] tiny PE now at... 304 bytes. Is this the end? (fwd)

Nicolas Brulez n.brulez at free.fr
Fri Oct 20 20:38:16 CDT 2006


Hey Peter,

Nice to see you :-)
> Remove the ".dll" from "urlmon.dll".  Windows will add it for you.
> There goes 4 more bytes.
>   
Yep, when i did some tests, i wasn't using .dll either.
> The header can be arranged differently to become smaller.
> I am 299 bytes now, but trying to make it better.
Nice :)
You can also play with the last character to be decrypted... if you pick 
your key well enough, you have it do an instruction and be the 0 at the 
same time (once decrypted).. :-)
To have one less byte..

N.



More information about the Code-Crunchers mailing list