Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Full Disclosure: Full-Disclosure

tiny PE now at... 304 bytes. Is this the end?

 

 

Full Disclosure full-disclosure RSS feed   Index | Next | Previous | View Threaded


ge at linuxbox

Oct 20, 2006, 4:33 AM

Post #1 of 1 (766 views)
Permalink
tiny PE now at... 304 bytes. Is this the end?

Gil kept working on tiny PE, and many others started pitching in ideas.

Apparently, one of the latest idea Gil was playin with (as mentioned in
his first post) Optional Header Size. Apparently, as two reversers in anti
virus companies let him know, a virus played with this too, which got tiny
PE down to 330 bytes.

After more games, as he described below, it's now at 304 bytes and I
wonder who will shave those 4 bytes off?

Tiny PE v.3 can be found here:
http://ragestorm.net/tiny/tiny3.exe

Blog on details here:
http://blogs.securiteam.com/index.php/archives/690

Gadi.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Full Disclosure full-disclosure RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.