Skip to content

deeprobin/erase-pe-header

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

erase-pe-header

This crate overwrites the PE header in memory with nulls. This can trick some antivirus & analysis software and it could be useful in malware creation. This crate was not created with malicious intent but for educational purposes. (Only works on windows)

This crate was adapted from C++ Source.

Example

fn main() {
    if cfg!(target_os = "windows") {
        unsafe { erase_pe_header::erase_pe_header() };
    }
    println!("Hello world");
}

About

Erases windows portable x86-executable headers from memory

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages