Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

PE Section Adder and rebuilder

This forum focuses on analyzing malware and any aspects of dealing with packer protections.
Locked
yekhni
Junior Member
Posts: 2
Joined: Thu Sep 19, 2013 7:00 am

PE Section Adder and rebuilder

Post by yekhni »

HI..


I Have dumped a Executable page from a section of running process, Now i know that the addresses referenced in that page are relative ( i.e its position independent) now i added this section with a PE header to make it into an executable file . now the problem is that the size of .text should be 0x4000 which i am not able to change , by default in the PE dummy file it was 0x1000??

Cheers!
Locked