Menu

i added opaque predicates, anti-debug, and section obfuscation to my PE packer published
πŸ–ΌοΈ

i added opaque predicates, anti-debug, and section obfuscation to my PE packer published

DEV CommunityΒ·iamsopotatoeΒ·6 months ago
#HvG65BEf
#cpp#security#lowlevel#tinyload#actually
Reading 0:00
15s threshold

TinyLoad v4 is out β€” here's what i added and why it actually matters:

so TinyLoad v4 just dropped. if you don't know TinyLoad β€” it's my open-source PE packer for Windows. you throw an exe at it, it compresses and encrypts it with a custom VM, and spits out a self-extracting stub that runs the original entirely in RAM. no temp files, no installer, nothing written to disk. one .cpp file, no dependencies. here's the repo .

v3 was already a decent jump because that's when the custom VM came in β€” randomised opcode shuffling so every packed file speaks a different instruction set. v4 is more focused. three specific additions that each solve a different analysis problem:

VM opaque predicates

anti-debug checks

PE section name obfuscation

let me actually explain each one instead of just listing them.

opaque predicates β€” confusing static analysis

when someone's trying to reverse a packed binary statically, they're usually building a control flow graph β€” figuring out which code actually runs and in what order.…

Continue reading β€” create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.