Execute from mem

[Inverted]

Interesting, and here is the unwrapped executable

http://www.fileden.com/files/2007/9/17/1438876/unwrapped.7z

[Tom42]

nothing happens when I run the created EXE (one I made not the given example)

Edited January 30, 2009 by krawhitham

[jpam]

Interesting, and here is the unwrapped executable

http://www.fileden.com/files/2007/9/17/1438876/unwrapped.7z

That's because the program is not encrypting the exe yet

the autoit exe get crippled when i use encryption ,(error can't find autoit script)

its seems that only interpreting languages don't work anymore

with native code C or asm the exe can be encrypted and they are running fine

still searching for a solution.

nothing happens when I run the created EXE (one I made not the given example)

You have to redownload the zip, i have updated the program

It has now icon support , put an icon in the workingdir and it add it to your new exe file,

or if no icon is found then efmc extract the icon from the source file.

[MyDream]

The new efmc file still wont work on the simple the messagebox example that I used.

jpam, have you found out the reason why it wont work on such a simple msg code yet?

I was waiting for this tool. Oh well, guess I have to wait a little longer then.(>.<)

BTW, Inverted, what did your exe file do? When I run it, nothing happen, it just freeze in my task manager?

Edited January 30, 2009 by MyDream

[jpam]

The new efmc file still wont work on the simple the messagebox example that I used.

The last efmc.exe should work without problems.

jpam, have you found out the reason why it wont work on such a simple msg code yet?

was using WinExec, changed to CreateProcess

I was waiting for this tool. Oh well, guess I have to wait a little longer then.(>.<)

Well , you have to wait even longer, because i lost my source code tonight,

overwritten with another source file

I have to rewrite the hole thing !

BTW, Inverted, what did your exe file do? When I run it, nothing happen, it just freeze in my task manager?

It should display your simple msgbox

[Inverted]

My unwrapped file was the ... unwrapped file in jpam's example. Shows a windows with a little picture.

I've tested it on 3 PCs , XP and Vista, and it works fine.

Anyway, I'll be keeping an eye out for a new version, since the proof of concept succeded

[akshay]

i wanted to know how did your convert the image to memeory data

i hav a little doubt

http://www.autoitscript.com/forum/index.ph...8&hl=akshay

[Proph]

Here is another request you may be able to add to this:

Could you have it get the file info from the exe and put the same file info into the new exe?

Like Version, Description, Copyright, and so on.

[MyDream]

The last efmc.exe should work without problems.

was using WinExec, changed to CreateProcess

Well , you have to wait even longer, because i lost my source code tonight,

overwritten with another source file

I have to rewrite the hole thing !

It should display your simple msgbox

Well, it's almost year end now, any update on this nice tool?

Thanks.

[IchBistTod]

anyone have a download for this?

[Splash]

anyone have a download for this?

I want too. :|

[MyDream]

Well, should I said its already 2 years now. You have to get on the waiting list just like me.

[jpam]

when searching my old harddisk i found ecfm.zip

it is a full working version.

i don't have acces to any server at the moment

so if someone want to put ecfm on his own public server

sent me a email, i send the zip to you.

Kind Regards

ouderaa@zeelandnet.nl

jpam

[Morthawt]

I can't get it to download. Where is the link?

[microso]

If jpam would have little time to spare, he probably would respond to e-mail if it still has the efmc.zip

Best Regards.

[legend]

this is indeed very nice, but the file can be dumped from memory, and then it can be decompiled.

The only solution I can think of is (hex editing the file) witch we don't talk about.

[mesale0077]

Test program; executefrommem.zip

Execute From Mem Creator

efmc.zip

It has now Icon support

link broken

again please new link