Dailydave mailing list archives
tiny PE now at... 304 bytes. Is this the end?
From: Gadi Evron <ge () linuxbox org>
Date: Fri, 20 Oct 2006 06:32:58 -0500 (CDT)
Gil kept working on tiny PE, and many others started pitching in ideas. Apparently, one of the latest idea Gil was playin with (as mentioned in his first post) Optional Header Size. Apparently, as two reversers in anti virus companies let him know, a virus played with this too, which got tiny PE down to 330 bytes. After more games, as he described below, it's now at 304 bytes and I wonder who will shave those 4 bytes off? Tiny PE v.3 can be found here: http://ragestorm.net/tiny/tiny3.exe Blog on details here: http://blogs.securiteam.com/index.php/archives/690 Gadi. _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- tiny PE now at... 304 bytes. Is this the end? Gadi Evron (Oct 20)
- Re: tiny PE now at... 304 bytes. Is this the end? BobCat (Oct 20)
- Re: tiny PE now at... 304 bytes. Is this the end? Dave Korn (Oct 23)
- Re: tiny PE now at... 304 bytes. Is this the end? BobCat (Oct 23)
- Re: tiny PE now at... 304 bytes. Is this the end? Dave Korn (Oct 23)
- Re: tiny PE now at... 304 bytes. Is this the end? Dave Korn (Oct 23)
- Re: tiny PE now at... 304 bytes. Is this the end? BobCat (Oct 20)
- Re: tiny PE now at... 304 bytes. Is this the end? Alexander Sotirov (Oct 20)
- Re: tiny PE now at... 304 bytes. Is this the end? Gadi Evron (Oct 23)