Government Security
Network Security Resources

Jump to content

Photo

Lfanew Field

- - - - -
  • Please log in to reply
3 replies to this topic

#1 tcop

tcop

    Private

  • Members
  • 3 posts

Posted 08 November 2010 - 10:40 AM

Hi all,
The last 2 days i am researching about pe exe. I try to append a whole exe file in the end of an existing. Then i change the lfanew field (3ch) by placing the new address. The problem is that i cant get the seconf file to run. So it must be some other field i must also change. When i use the LordPe i see that the directory entries are bad and i can't see the normal dll names. Can i have a quick response plz?

#2 tcop

tcop

    Private

  • Members
  • 3 posts

Posted 08 November 2010 - 11:12 AM

Anyone? I keep refreshing the ie waiting for some help....

#3 tcop

tcop

    Private

  • Members
  • 3 posts

Posted 11 November 2010 - 07:53 AM

Come one guys...
I've change almost everything (sections,entry points .etc)
still nothing...
someone, help!

#4 HellRaider

HellRaider

    Private

  • Members
  • 1 posts

Posted 24 March 2011 - 05:33 AM

U will understand why its not working after reading

Portable_Executable_File_Format_Compendium_v11_by_Goppit

download it , then u will probably know the answer to ur question....