├── LICENSE ├── ManualResourceDataFetching.sln ├── ManualResourceDataFetching ├── ManualResourceDataFetching.vcxproj ├── ManualResourceDataFetching.vcxproj.filters ├── ManualResourceDataFetching.vcxproj.user ├── PAYLOAD.ico ├── main.c ├── resources.h └── resources.rc ├── README.md └── zghDmV.png /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2022 ORCA 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /ManualResourceDataFetching.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio Version 17 4 | VisualStudioVersion = 17.1.32421.90 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "ManualResourceDataFetching", "ManualResourceDataFetching\ManualResourceDataFetching.vcxproj", "{7A787D86-FB03-4C31-AE3D-083B7801E9F7}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|x64 = Debug|x64 11 | Debug|x86 = Debug|x86 12 | Release|x64 = Release|x64 13 | Release|x86 = Release|x86 14 | EndGlobalSection 15 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 16 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x64.ActiveCfg = Debug|x64 17 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x64.Build.0 = Debug|x64 18 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x86.ActiveCfg = Debug|Win32 19 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Debug|x86.Build.0 = Debug|Win32 20 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x64.ActiveCfg = Release|x64 21 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x64.Build.0 = Release|x64 22 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x86.ActiveCfg = Release|Win32 23 | {7A787D86-FB03-4C31-AE3D-083B7801E9F7}.Release|x86.Build.0 = Release|Win32 24 | EndGlobalSection 25 | GlobalSection(SolutionProperties) = preSolution 26 | HideSolutionNode = FALSE 27 | EndGlobalSection 28 | GlobalSection(ExtensibilityGlobals) = postSolution 29 | SolutionGuid = {2F04D04F-BE06-4454-B8C4-CBE120015BDB} 30 | EndGlobalSection 31 | EndGlobal 32 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/ManualResourceDataFetching.vcxproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Debug 6 | Win32 7 | 8 | 9 | Release 10 | Win32 11 | 12 | 13 | Debug 14 | x64 15 | 16 | 17 | Release 18 | x64 19 | 20 | 21 | 22 | 16.0 23 | Win32Proj 24 | {7a787d86-fb03-4c31-ae3d-083b7801e9f7} 25 | ManualResourceDataFetching 26 | 10.0 27 | 28 | 29 | 30 | Application 31 | true 32 | v143 33 | Unicode 34 | 35 | 36 | Application 37 | false 38 | v143 39 | true 40 | Unicode 41 | 42 | 43 | Application 44 | true 45 | v143 46 | Unicode 47 | 48 | 49 | Application 50 | false 51 | v143 52 | true 53 | Unicode 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | true 75 | 76 | 77 | false 78 | 79 | 80 | true 81 | 82 | 83 | false 84 | 85 | 86 | 87 | Level3 88 | true 89 | WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) 90 | true 91 | 92 | 93 | Console 94 | true 95 | 96 | 97 | 98 | 99 | Level3 100 | true 101 | true 102 | true 103 | WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) 104 | true 105 | 106 | 107 | Console 108 | true 109 | true 110 | true 111 | 112 | 113 | 114 | 115 | Level3 116 | true 117 | _DEBUG;_CONSOLE;%(PreprocessorDefinitions) 118 | true 119 | 120 | 121 | Console 122 | true 123 | 124 | 125 | 126 | 127 | Level3 128 | true 129 | true 130 | true 131 | NDEBUG;_CONSOLE;%(PreprocessorDefinitions) 132 | true 133 | 134 | 135 | Console 136 | true 137 | true 138 | true 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/ManualResourceDataFetching.vcxproj.filters: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | {4FC737F1-C7A5-4376-A066-2A32D752A2FF} 6 | cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx 7 | 8 | 9 | {93995380-89BD-4b04-88EB-625FBE52EBFB} 10 | h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd 11 | 12 | 13 | {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} 14 | rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms 15 | 16 | 17 | 18 | 19 | Header Files 20 | 21 | 22 | 23 | 24 | Resource Files 25 | 26 | 27 | 28 | 29 | Source Files 30 | 31 | 32 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/ManualResourceDataFetching.vcxproj.user: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/PAYLOAD.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NUL0x4C/ManualRsrcDataFetching/8e48dd05a1d25d93ee1912ce6561ea1e983ea6f1/ManualResourceDataFetching/PAYLOAD.ico -------------------------------------------------------------------------------- /ManualResourceDataFetching/main.c: -------------------------------------------------------------------------------- 1 | #include 2 | #include 3 | #include "resources.h" 4 | 5 | 6 | 7 | 8 | BOOL GetResourceData(HMODULE hModule, WORD ResourceId, PVOID* ppResourceRawData, PDWORD psResourceDataSize) { 9 | 10 | CHAR* pBaseAddr = (CHAR*)hModule; 11 | PIMAGE_DOS_HEADER pImgDosHdr = (PIMAGE_DOS_HEADER)pBaseAddr; 12 | PIMAGE_NT_HEADERS pImgNTHdr = (PIMAGE_NT_HEADERS)(pBaseAddr + pImgDosHdr->e_lfanew); 13 | PIMAGE_OPTIONAL_HEADER pImgOptionalHdr = (PIMAGE_OPTIONAL_HEADER)&pImgNTHdr->OptionalHeader; 14 | PIMAGE_DATA_DIRECTORY pDataDir = (PIMAGE_DATA_DIRECTORY)&pImgOptionalHdr->DataDirectory[IMAGE_DIRECTORY_ENTRY_RESOURCE]; 15 | 16 | PIMAGE_RESOURCE_DIRECTORY pResourceDir = NULL, pResourceDir2 = NULL, pResourceDir3 = NULL; 17 | PIMAGE_RESOURCE_DIRECTORY_ENTRY pResourceEntry = NULL, pResourceEntry2 = NULL, pResourceEntry3 = NULL; 18 | 19 | PIMAGE_RESOURCE_DATA_ENTRY pResource = NULL; 20 | 21 | 22 | pResourceDir = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress); 23 | pResourceEntry = (IMAGE_RESOURCE_DIRECTORY_ENTRY*)(pResourceDir + 1); 24 | 25 | 26 | for (size_t i = 0; i < (pResourceDir->NumberOfNamedEntries + pResourceDir->NumberOfIdEntries); i++) { 27 | 28 | if (pResourceEntry[i].DataIsDirectory == 0) 29 | break; 30 | 31 | pResourceDir2 = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry[i].OffsetToDirectory & 0x7FFFFFFF)); 32 | pResourceEntry2 = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(pResourceDir2 + 1); 33 | 34 | if (pResourceEntry2->DataIsDirectory == 1 && pResourceEntry2->Id == ResourceId){ 35 | 36 | pResourceDir3 = (PIMAGE_RESOURCE_DIRECTORY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry2->OffsetToDirectory & 0x7FFFFFFF)); 37 | pResourceEntry3 = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(pResourceDir3 + 1); 38 | 39 | pResource = (PIMAGE_RESOURCE_DATA_ENTRY)(pBaseAddr + pDataDir->VirtualAddress + (pResourceEntry3->OffsetToData & 0x7FFFFFFF)); 40 | 41 | *ppResourceRawData = (PVOID)(pBaseAddr + (pResource->OffsetToData)); 42 | *psResourceDataSize = pResource->Size; 43 | 44 | break; 45 | } 46 | 47 | } 48 | 49 | if (*ppResourceRawData != NULL && *psResourceDataSize != NULL) 50 | return TRUE; 51 | 52 | return FALSE; 53 | } 54 | 55 | 56 | int main() { 57 | 58 | 59 | 60 | PVOID ppResourceRawData = NULL; 61 | DWORD psResourceDataSize = NULL; 62 | 63 | 64 | if (!GetResourceData(GetModuleHandle(NULL), MY_PAYLOAD, &ppResourceRawData, &psResourceDataSize)) { 65 | return -1; 66 | } 67 | 68 | printf("[i] ppResourceRawData : 0x%p \n[i] psResourceDataSize : %d \n", ppResourceRawData, psResourceDataSize); 69 | 70 | system("PAUSE"); 71 | 72 | PVOID pAddress = VirtualAlloc(NULL, psResourceDataSize, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); 73 | memcpy(pAddress, ppResourceRawData, psResourceDataSize); 74 | CreateThread(NULL, 0, pAddress, NULL, NULL, NULL); 75 | 76 | 77 | 78 | system("PAUSE"); 79 | return 0; 80 | } 81 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/resources.h: -------------------------------------------------------------------------------- 1 | #define MY_PAYLOAD 0x314 2 | -------------------------------------------------------------------------------- /ManualResourceDataFetching/resources.rc: -------------------------------------------------------------------------------- 1 | #include "resources.h" 2 | 3 | MY_PAYLOAD RCDATA PAYLOAD.ico 4 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | ## ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. 2 | 3 | 4 | 5 | #### Note: Payload.ico is a x64 calc shellcode 6 | 7 | -------------------------------------------------------------------------------- /zghDmV.png: -------------------------------------------------------------------------------- 1 | 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 --------------------------------------------------------------------------------