Skip to content

K3rnel-Dev/DotNet-MalwarePacker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CSHARP

Banner

🌌 DotNet_Packer 🌌

DotNet_Packer is a good .NET file packer that offers encryption, memory loading, ETW patching, and obfuscation capabilities to protect your executable files. It leverages XOR-based encryption and enhances security by adding junk classes, obfuscation, and Event Tracing for Windows (ETW) patching.



🚀 Features

  • File Encryption: XOR encryption for .NET executables.
  • Memory Loading: Executes the packed file directly from memory.
  • Obfuscation: Adds junk code and obfuscates your executable.
  • ETW Patching: Patches Event Tracing for Windows (ETW) to evade detection.

🔧 Builder Usage

DotNet_Packer.exe --file <input_file> --out <output_file> [options]

⚙️ Options

  • --file 🗃️: Specify the input file to encrypt and pack.
  • --out 🖥️: Specify the output file name (default: stub.exe).
  • --obfuscate 🌀: Enable code obfuscation for added protection (rename-functions).
  • --junk 🛠️: Add junk classes (default: 100).
  • --in-junk 🧩: Add junk methods per class (default: 10).
  • --patch-etw 🔒: Patch Event Tracing for Windows (ETW).
  • --help, -h 📄: Display help information.

🧐 Detect Rate (6/26 - Non obfuscated Quasar Client):

Detect-Rate

🛡️ Stub Review:

Photo

⚠️ Disclaimer

This tool is created for educational purposes only.
Any misuse of this project for malicious purposes is strictly prohibited.
The author is not responsible for any illegal use or damages caused by this tool.


🖥️ Credits