Application program encasing method

An application and segment technology, applied in the computer field, can solve problems such as large file size and cannot prevent ida static analysis, and achieve the effect of preventing program debugging and increasing the difficulty of unpacking

Inactive Publication Date: 2021-02-09
广州锦行网络科技有限公司
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] However, compressed shells such as Upx and ASpack cannot prevent ida static analysis, and the encrypted shells disclos

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Application program encasing method
  • Application program encasing method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0014] The invention discloses a method for packing an application program. Firstly, the executable file is copied into the memory, and the resource table is extracted by splitting the segments, the PE header is modified, and other segments are integrated into one segment and then encrypted. Add three more sections A, B, and C, the last two are used to store the packed code and repair their relocation table, the first one is used to store the module used for code inspection; the encrypted import table, the encrypted function name is tables, tables of function addresses, fill them with hashes of function names, and point entry points to functions in the C section (such as figure 1 shown).

[0015] The codes of the sections B and C are all copied from the sections in the prepared dll file, the section B is mainly used for decrypting and repairing the target file, and the section C is mainly used for decompressing the target file.

[0016] Such as figure 2 As shown, the code f...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an application program encasing method, which comprises the following steps: copying an executable file into a memory, splitting sections to extract a resource table, modifyinga PE head, integrating other sections into one section, placing the sections together and encrypting, adding three sections A, B and C, wherein the later two are used for storing encasing codes and repairing repositioning tables thereof, and the first is used for storing a code checking module; the second one is used for repairing the running environment of the shelled program; and the third oneis used for decompressing each segment, organizing the data of the segment A into a dll file and loading the dll file.

Description

technical field [0001] The invention relates to the technical field of computers, in particular to a method for packing application programs. Background technique [0002] Packing is a method of changing the encoding of executable program files or dynamic link library files through a series of mathematical operations to achieve the purpose of reducing file size or encrypting program encoding. Existing packing products include compressed shells such as Upx and ASpack, such as encrypted shells such as patents CN201110437932.9 and CN201310648196.0. [0003] However, compressed shells such as Upx and ASpack cannot prevent ida static analysis, and the encrypted shells disclosed in patents CN201110437932.9 and CN201310648196.0 do not have compressed codes, and the file size after packing is too large. Therefore it is necessary to study a scheme to solve the above problems. Contents of the invention [0004] In view of this, the present invention addresses the shortcomings ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/60G06F21/14
CPCG06F21/14G06F21/602
Inventor 吴建亮胡鹏张振林
Owner 广州锦行网络科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap