Sharperner: generate .NET dropper with AES and XOR obfuscated shellcode

[itsMe]

Sharperner

Sharperner is a tool written in CSharp that generates a .NET dropper with AES and XOR obfuscated shellcode. A generated executable can possibly bypass signature check but I can’t be sure it can bypass heuristic scanning.

Features

PE binary

    Process Hollowing
    PPID Spoofing
    Random generated AES key and iv
    Final Shellcode, Key, and IV are translated to morse code

.NET binary

    AES + XOR encrypted shellcode
    APC Process Injection (explorer.exe)
    Random function names
    Random generated AES key and iv
    Final Shellcode, Key, and IV are translated to morse code

To see this hidden content, you must like this content.