EXEForger (SignsImitator) - утилита подменяет исходные сигнатуры файла и позволяет выдавать за любую сигнатуру из предложенного списка.
-------//-------------------
False positive:
Check MD5 and SHA1 at www.delphi4arab.com or www.at4re.com
-------//-------------------
Version 1.0.40.10 [04/2010] BETA 01 (Test release)
— EXEForger <- New name.
— Add Anti fake signature detector.
— Add Fake linker.
— Add Fake subsystem.
— Add Random section name.
— Windows Vista/Seven support.
Version 1.0.20.08 [01/2008]
— Bug fixed : Crash if no padding after last section.
— Add false signs for All programs [See the tested files]
— .Net not supported.
— Add false signs in packed programs [See the tested files]
Version 1.0.10.08 [10/2007]
— First public release. (Test release)
— Add false signs only for Delphi programs.
— Use All PEiD Data base.
-------//-------------------
Greetz :
Arab Team 4 Reverse Engineering <<-- www.at4re.com
Delphi4Arab <<-- www.delphi4arab.com
EXEForger (SignsImitator) 1.0.40.10
Author: STRELiTZIA
Release date: April 2010
Type: RCE Tool
Download: EXEForger (SignsImitator) v1.0.40.10 (3118)
|