What I want to do is to modify the behavior of a binary file ( but I don't have sourcecode of this file). One solution I can think about is to create a wrapper, and this wrapper can defer some API calls or add additional API calls. Do you know is there any existing libraries support this? Thank you.

  • hi, I searched, but all the suggestions I got are related to how to convert jar to exe or to create exe from python code, not a wrapper for exe. Could you please give me one option? Thank you. – user3404735 Dec 11 '17 at 17:31
  • sure, change your search term: "malware wrapper" – schroeder Dec 11 '17 at 17:59

Windows executables interacts with OS (WinAPI) functions through system DLLs. Without modifying the exe, one trick is to hijack those calls - search for "dll injection".

  • 1
    Don't forget about LD_PRELOAD on Linux. – multithr3at3d Dec 11 '17 at 20:22
  • Agree that "dll injection" is one trick to hijack those calls. Indeed, my intent is to create a wrapper for malwares such that I can modify the behavior of them in a generic way. – user3404735 Dec 12 '17 at 7:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.