Einzelnen Beitrag anzeigen

Neotracer64

Registriert seit: 27. Okt 2004
292 Beiträge
 
Delphi 7 Professional
 
#15

Re: Schutz vor Decompeilierung

  Alt 23. Mai 2005, 00:20
Benutz Morphine. Kennt keine Sau. Also kann sie fast keine Sau entpacken.

http://hxdef.czweb.org/download/Morphine27.zip

Zitat:
Morphine is very unique application for PE files encryption. Unlike
other PE encryptors and compressors Morphine includes own PE loader which
enables it to put whole source image to the .text section of new PE file. This
one is very powerful because you can compress source file with your favourite
compressor like UPX and then encrypt its output with Morphine. Another powerful
thing here is polymorphic engine which always creates absolutely different
decryptor for the new PE file. This mean if your favourite trojan horse is
detected by an antivirus you can encrypt it with Morphine. You will not get
the virus alert again.
What's more, Morphine allows you to encrypt one file several times!
But be sure you're using -b option (see usage) when doing this. Unlike others
Morphine enlarges your executable by not more than 5kb (this is not true for
morphined DLLs without using -d option, see below)! Morphine supports most
of PE files and many of other PE encryptor/packers. Also one of the greatest
things here is that it is an open source project. In these days antivirus
companies sniff around our site waiting for new version of morphine to add
new decoder into their databases. But you can simply make your own undetectable
version. Because new PE file has random loader it is possible the loading will
take more time than you want to (especially when encrypting bigger files).
If this occurs simply delete the long time loading PE file and try to build it
again. And be careful with morphined DLLs. This can really slow down final
execution.
Whole Morphine code is compatible with Delphi 6 and 7 compiler.
Morphined files can be executed on Windows with NT kernel only.
  Mit Zitat antworten Zitat