[Code-Crunchers] Tiny PE: now 274 bytes

Gil Dabah distorm at gmail.com
Fri Oct 20 21:09:02 CDT 2006


That's a nice achievement.
But that is against the rules I posted, WinExec must not be viewable as well
as the urlmon and other api's.

I said only GetProcAddress and LoadLibraryA, but if that's not for the
challenge then fine :)

> -----Original Message-----
> From: Peter Ferrie [mailto:pferrie at symantec.com]
> Sent: Saturday, October 21, 2006 3:19 AM
> To: code-crunchers at whitestar.linuxbox.org
> Subject: [Code-Crunchers] Tiny PE: now 274 bytes
> 
> Imported WinExec avoids the LoadLibraryA call, moved "WinExec" after the
> "MZ", "kernel32.dll" and "LoadLibraryA" strings moved into the PE header,
> "GetProcAddress" string is in the section table.
> 
> _______________________________________________
> Code-Crunchers mailing list
> Code-Crunchers at whitestar.linuxbox.org
> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers



More information about the Code-Crunchers mailing list