runpe

Run a Exe File (PE Module) in memory (like an Application Loader)

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Demos of various injection techniques found in malware

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

Telegram: @siriusdeveloper

ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side

Tool to evade Antivirus With Different Techniques

RunPE implementation with multiple evasive techniques

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

Make "upx -d" unpacking impossible!

Hide malware behind a legit process C#

Cronos Crypter is an simple example of crypter created for educational purposes.

ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

Nim process hollowing loader

execute a PE in the address space of another PE aka process hollowing

Simple protector to show how to run a payload without dropping it using RunPE Technique

RunPE using Hell's Gate technique.

Golang version of https://github.com/hasherezade/libpeconv

Advanced Windows application loader featuring secure authentication, automatic updates, and in-memory PE execution. Built with C++, ImGui, and DirectX 9.

Software Protector