Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[Full-disclosure] tiny PE now at... 304 bytes. Is this the end?
From: Gadi Evron (gelinuxbox.org)
Date: Fri Oct 20 2006 - 06:33:32 CDT
Gil kept working on tiny PE, and many others started pitching in ideas.
Apparently, one of the latest idea Gil was playin with (as mentioned in
his first post) Optional Header Size. Apparently, as two reversers in anti
virus companies let him know, a virus played with this too, which got tiny
PE down to 330 bytes.
After more games, as he described below, it's now at 304 bytes and I
wonder who will shave those 4 bytes off?
Tiny PE v.3 can be found here:
Blog on details here:
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/