| 146 | |
| 147 | |
| 148 | def test_exe_code(): |
| 149 | print("Testing: EXEs: Payload in .text") |
| 150 | settings = Settings("unittest") |
| 151 | |
| 152 | settings.payload_base = "createfile.bin" |
| 153 | settings.verify = True |
| 154 | settings.try_start_final_infected_exe = False |
| 155 | settings.payload_location = PayloadLocation.CODE |
| 156 | settings.carrier_name = "alloc_rw_rwx" # important (not rx) |
| 157 | |
| 158 | # EXE 7Z |
| 159 | settings.injectable_base = "7z.exe" |
| 160 | |
| 161 | print("Test EXE CODE 1/8: 7z, overwrite-main") |
| 162 | settings.carrier_invoke_style = CarrierInvokeStyle.OverwriteFunc |
| 163 | if not start(settings): |
| 164 | return |
| 165 | |
| 166 | print("Test EXE CODE 2/8: 7z, backdoor-main") |
| 167 | settings.carrier_name = "peb_walk" |
| 168 | settings.carrier_invoke_style = CarrierInvokeStyle.BackdoorFunc |
| 169 | if not start(settings): |
| 170 | return |
| 171 | |
| 172 | |
| 173 | # EXE procexp64.exe |
| 174 | |
| 175 | settings.injectable_base = "procexp64.exe" |
| 176 | |
| 177 | print("Test EXE CODE 5/8: procexp, overwrite-main") |
| 178 | settings.carrier_name = "alloc_rw_rwx" |
| 179 | settings.carrier_invoke_style = CarrierInvokeStyle.OverwriteFunc |
| 180 | if not start(settings): |
| 181 | return |
| 182 | |
| 183 | print("Test EXE CODE 6/8: procexp, backdoor-main") |
| 184 | settings.carrier_name = "alloc_rw_rwx" |
| 185 | settings.carrier_invoke_style = CarrierInvokeStyle.BackdoorFunc |
| 186 | if not start(settings): |
| 187 | return |
| 188 | |
| 189 | |
| 190 | |