Juil 222019
A demo to run a encrypted xored encrypted PE within the memory of another PE (and therefore possibly bypass anti virus softwares)
See https://github.com/erwan2212/XOR-freepascal about xoring / encrypting a file.
Code is currently set to use cmd.exe (x86/x64) as target host.
host32.exe/host64.exe are also provided in the zip if you wish the modify the code to use a « neutral » host.
Source code and binaries can be found here.