MASM RunPE Shell Code

[Coldzer0]

First I don't know if this the Right forum to post My code

so

Here's My MASM Shell Code

http://pastebin.com/32Ntt5zG#

and Shell AS Bytes ( Delphi )

http://pastebin.com/tFP1UpqR#

and remember

{
XOR AL,00h ; XOR Key 1 (Byte Number $686 )
XOR AL,00h ; XOR Key 2 (Byte Number $684)
}

{
NewRunPE [$684] := KEY2;
NewRunPE [$686] := KEY1;
}

i hope it helps

[DaGoN]

Thanks Coldzer0, i'll try it. Is it works also in x64 machine?

[Coldzer0]

thanks DaGoN for reply

and yes i test it on x64 and x32

and here's some update in shellcode

i add small code to convert module name to UpperCase

cuz in XP module name in lowerCase and in Win8 it's UpperCase

new code : http://pastebin.com/WgMv0ncX