Skip to content

Erases windows portable x86-executable headers from memory

Notifications You must be signed in to change notification settings

deeprobin/erase-pe-header

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 
 
 

Repository files navigation

erase-pe-header

This crate overwrites the PE header in memory with nulls. This can trick some antivirus & analysis software and it could be useful in malware creation. This crate was not created with malicious intent but for educational purposes. (Only works on windows)

This crate was adapted from C++ Source.

Example

fn main() {
    if cfg!(target_os = "windows") {
        unsafe { erase_pe_header::erase_pe_header() };
    }
    println!("Hello world");
}

About

Erases windows portable x86-executable headers from memory

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages