[c++] Runtime Resource Adding - Remote Administration Tool Research forum

DigitalNemesis · #1 (**permalink**) 06-12-2009, 10:44

I'm Trying to make a "builder" for my crypter.

But i have a problem that with hours of googleing msnding i cannot solve...

When i add a resource to my dropped stub the droped file ends up smaller insize (and doesnt work).

(im adding not replacesing as the number of resources im going 2 need is unknow at the time of compiling my stub as i have to split the payload into maybe resources so its not detected.)

The code im using is below.

Code:

BOOL addResource(char* szFileName, LPBYTE lpData, DWORD dwSize, int id)
{
    HANDLE hUpdateRes = BeginUpdateResource(szFileName, FALSE);
    if (hUpdateRes == NULL)
    {
        MessageBox(NULL,"BeginUpdateResource()","ERROR",MB_OK);
        return FALSE;
    }
    BOOL result = UpdateResource(
        hUpdateRes,
        RT_RCDATA,
        MAKEINTRESOURCE(id),
        MAKELANGID(LANG_NEUTRAL, SUBLANG_NEUTRAL),
        (LPVOID)lpData,
        dwSize
    );

    if (!result)
    {
        MessageBox(NULL,"UpdateResource()","ERROR",MB_OK);
        EndUpdateResource(hUpdateRes, TRUE);
        return FALSE;
    }
    if(EndUpdateResource(hUpdateRes, FALSE))
    {
        return TRUE;
    }
    return FALSE;
}

i put it into a method to try and isolate the problem but i with no luck.
Am i doing it wrong? i have tryed to look at sources for builders (only finding cryptic) and could not find a solution...

Thanks in advance, DigitalNemeis

Zer0Flag · #2 (**permalink**) 06-12-2009, 11:23

I hope this link will help you a bit :

Code:

http://www.codeproject.com/KB/cpp/UpdateResource.aspx

Greetz Zer0Flag

DigitalNemesis · #3 (**permalink**) 06-12-2009, 11:35

Quote:

Originally Posted by Zer0Flag

I hope this link will help you a bit :

Code:

http://www.codeproject.com/KB/cpp/UpdateResource.aspx

Greetz Zer0Flag

thanks man, i found that one on google already, but ill double check my stuff on it XD i got the cast to (LPVOID) from that page

DigitalNemesis · #4 (**permalink**) 09-12-2009, 12:07

still cant get it working

can any one help me

I'm guess im doing this part right then... maybe my PE has something wrong with it?? no clue... Im use g++ compiler...

Zer0Flag · #5 (**permalink**) 09-12-2009, 16:03

I got some errors when I wanted to use the resource type like you. I just changed it into "RT_RCDATA" ( yes with the "" ) and it worked.

else try this one:

Code:

void addResource(char* szFileName, LPBYTE lpData, DWORD dwSize, int id){
   HANDLE hResource = BeginUpdateResource(szFileName, FALSE);
   if (NULL != hResource){
     if (UpdateResource(hResource, 
        "RT_RCDATA", 
        MAKEINTRESOURCE(id), 
        MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT), 
        (LPVOID) lpBuffer, 
        dwFileSize) != FALSE)
     {
        EndUpdateResource(hResource, FALSE);
     }
  }
}

Greetz Zer0Flag

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Help about adding usb spread on projects	kari	Trojan discussion and general help	0	09-07-2009 14:37
Adding a stealer in a program?	VitaminX	Source Code help	1	19-05-2009 23:40
Adding a digit	OD_	Delphi help	1	25-08-2006 04:42
Adding parameters to a procedure	ratws	Delphi help	6	28-09-2005 23:58
Adding VNC capabilities to a RAT	ratws	Delphi help	7	29-07-2005 16:14